I just had two (hams) land in spam (I am ureasonably, by SA doctrine, aggressive, but that's not the point).
One was from gmail, direct to my server, and one was from outlook ([email protected]), via a sourceforge list. Both were tagged with RCVD_IN_BL_SPAMCOP_NET and sure enough $ host 74.125.224.50 50.224.125.74.in-addr.arpa domain name pointer mail-yx1-f50.google.com. https://www.spamcop.net/bl.shtml?74.125.224.50 This seems new that spamcop is listing google. They are right to do so, because google emits enough spam that my ancedata is that mail arriving from gmail (not from a list), with a sender not previously known to me, is very likely to be spam, maybe 80%. Even with lists, the odds of spam from unknown senders is still pretty high. (Not all lists moderate new members like they should.) Same for outlook, which seems to let spammers register new hosted domains and start spamming. Mail arriving from a new onmicrosoft.com domain via outlook is also highly likely spam. I am guessing that spamcop previously had a "nolist" policy for google, outlook and similar place which are a mixed ham/spam source, and they have decided to go ahead and list. But searching doesn't find that, and does find 3 years ago when outlook got listed because outlook was spamming. - I wonder if others are seeing this. - I wonder if anyone has contemplated a per-sender address RBL for google/outlook/etc, both a spammer blocklist and a DOB list. Kind of scary privacy wise to query though,and probably a can of worms. - I suspect I should dig in to the txrep plugin and see if it's really working right and teach it to consider places that lets randoms sign up as not having reputation across senders. Plus ensure that the "store a good reputation for addresses my users send to". Then one can turn up points on "FROM_GMAIL", to score the not-heard-from addresses up while not having a net positive for actual correspondents. This would have avoided misfiling the gmail case today (addr now welcomelist_from_dkimed).
