I recently experienced an IP reputation issue with Gmail that seemed
to junk the email "on its own".

One of our transactional IPs (188.165.188.100) usually send less than
1000 daily emails.
A couple of weeks ago one of our free service (mosaico.io) got abused
and an ukrainan sent almost 90.000 email in few hours. We deleted
300.000 more emails from the queues and "closed" the door to the
abuser. Most recipients were .ru,  .ua and gmail.com .

We didn't see major deliverability issues after that, but Gmail.com
that started identifying every transactional message (even messages
similar to previously "prioritized" messages) from that IP as spam.

The weird thing is that GPT didn't log anything weird related to that
IP (it currently show only green-IPs for the domain).

We rerouted most email to another IP, now it seems Google "forgot"
about that incident so we can bring back the email to their original
IP.

But in this case it sounded a clear IP-based filter because the same
email, with the same DKIM signature, from a near IP was inboxed with
no issue.

Stefano

PS: the only "public" list recognizing the abuse issue have been
SenderScore that dropped from 99 to 7 for that IP with the volume
increased from "low" to "very high". Weird thing is that volume chart
have been high for 7 days (while the issue lasted a few hours).
SenderScore reputation raised again after 10 days, now it is 84 (it
seems it will take a while to go back to 99).


On 2 August 2017 at 22:42, Brandon Long via mailop <mailop@mailop.org> wrote:
> On Wed, Aug 2, 2017 at 9:36 AM, Laura Atkins <la...@wordtothewise.com> wrote:
>>
>> On Aug 2, 2017, at 3:15 AM, Benjamin BILLON via mailop <mailop@mailop.org>
>> wrote:
>>
>> In the case of Gmail, you can have _some_ hint about your domain's
>> reputation with the Gmail Postmaster Tools https://gmail.com/postmaster/
>>
>> @Laura> nice article, would it also apply to Hotmail, from your opinion?
>>
>>
>> Hotmail has some different tools in the box for filtering. IMO, Microsoft
>> relies more on IP reputation than Google does. Some of that is historic.
>> Google came onto the email scene later that everyone else (mid-2000s was
>> beta, I think). They also had money, lots of hardware, and internal
>> expertise to do content filtering. Google never really did IP based
>> filtering. Sure, there were some times when they’d push some mail away from
>> the MTAs, but most of their filtering was done after the SMTP transaction.
>> The short version of this is I never really pay any attention to IP
>> reputation when dealing with Gmail. It’s just another factor. Unless you’re
>> blocked and if you get blocked by Gmail, wow, you really screwed up.
>
> We do a lot more filtering at SMTP time now, but it's possible you
> just don't deal with customers
> that bad.  It's more for the "blatant" stuff.
>
> The IP reputation (from the postmaster tools) is also a good hint to
> how much of the mail from that IP
> is going to the spam label.
>
> That said, yes, it's really rare that IP reputation is used by itself.
>
> Brandon
>
>> Hotmail, in contrast, was founded in the early 90s and their filtering
>> started with IPs and then grew to deal with new threats. Hotmail still has
>> IP filtering at the base of the filtering pyramid. They also have the tools
>> and processes that enable them to block ranges rather than just IP
>> addresses. So I pay a little more attention to IP reputation at Hotmail.
>>
>> The caveat with all of this is that I don’t really care or check public
>> reputation scores. I know of senders with a SenderScore of 99 who can’t get
>> to the inbox to save their life, and senders with a SenderScore of 7 that
>> don’t have deliverability problems. Knowing what I do about SenderScore, the
>> data makes sense but I can get enough of a sense of the reputation without
>> having to visit the RP website. I will check Talos/Senderbase. The ratings
>> are less granular than SenderScore - basically bad, fine and great - but I
>> actually find that more useful. I can also look at surrounding IPs and see
>> what’s going on there.
>>
>> What the ISP is telling me is way more important. Microsoft delaying /
>> refusing mail during the SMTP transaction? All of the public reputation
>> scores are irrelevant, it’s what MS thinks that’s relevant. Just because the
>> public scores are fine, doesn’t mean that everything’s fine. The more
>> specific feedback overrides the general / public feedback.
>>
>> laura (I think I just wrote today’s blog post)
>>
>> --
>> Having an Email Crisis?  800 823-9674
>>
>> Laura Atkins
>> Word to the Wise
>> la...@wordtothewise.com
>> (650) 437-0741
>>
>> Email Delivery Blog: http://wordtothewise.com/blog
>>
>>
>>
>>
>>
>>
>>
>> _______________________________________________
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>>
>
> _______________________________________________
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to