Thankfully I don't need to worry about that for my use case, but you could probably solve a lot of this by whitelisting mailchimp, constant contact, and a few other providers that probably cover a large percentage of "legit" marketing mail.