I am seeing more messages coming in with the return path set in this format prvs=tag-value=user@company.com, the "tag-value" is a variable. As an example I previously whitelisted user@company.com but with his messages arriving in this format the whitelisted entry no longer works.

I end up cleaning up the multiple prvs= entries in the autowhitelist file and replacing them with a wildcard *user@company.com.

I have users questioning why did his email end up in quarantine when he is whitelisted.

Is there a better way of doing this? Any plans on adding support for this?

http://en.wikipedia.org/wiki/Bounce_Address_Tag_Validation