Pillar 011
Spam Filters & Blocklists
The storms every sender must face. This section unpacks how spam filters judge your messages, why blocklists exist, and how to stay off them. You’ll see what happens behind the curtain at Gmail, Outlook, and beyond.
Fundamentals of Spam Filtering
- What is a spam filter?
- How do spam filters work?
- How do spam filters decide if an email is spam?
- What signals do spam filters look at?
- Do spam filters learn over time?
- What’s the difference between spam filters and firewalls?
- What is a “filtering engine” vs a “filtering network”?
- What’s the difference between server-side and client-side filters?
- What’s the role of ISPs in filtering?
- What’s the difference between spam filtering and reputation systems?
- How do spam filters “learn”?
- What are heuristic rules in spam filtering?
- How do machine-learning models detect spam?
- What signals do filters analyze (header, content, behavior)?
- What’s the difference between global and user-level filtering?
- What is a “junk” folder vs “spam” folder?
- How does Gmail’s “Categories” tab fit into filtering?
Stages of Filtering
- At what point is an email filtered?
- What happens during SMTP connection filtering?
- What are IP-level rejections vs content-level rejections?
- What’s a 5xx permanent rejection vs a 4xx temporary one?
- What is pre-delivery vs post-delivery filtering?
- What happens between acceptance and inbox placement?
- How do spam filters evaluate ongoing sender behavior?
- What’s the difference between block, quarantine, and junk classification?
- What’s “greylisting” and why is it used?
- What are reputation decay models (how fast do filters forget)?
Filter Types (Content, Reputation, AI)
- What is content-based spam filtering?
- What is reputation-based spam filtering?
- How does AI and machine learning play a role in spam filtering?
- What are heuristic filters?
- What are gateway spam filters?
- What are hosted filters (Microsoft, Google, etc.)?
- What is a cloud filtering service (Proofpoint, Mimecast, Barracuda)?
- What are local or desktop filters (Outlook, Apple Mail, Thunderbird)?
- What are corporate filters vs consumer filters?
- How do enterprise firewalls handle bulk senders differently?
- What are content filters vs policy filters vs reputation filters?
- What are language or region-specific spam filters?
- What are phishing detection filters and how do they differ from spam?
- How do AI-based filters (TensorFlow, Microsoft SmartScreen) operate?
Filter Signals & Spam Scoring
- What is a spam score?
- How is a spam score calculated?
- How do filters calculate a spam score?
- What tools assign spam scores (e.g., SpamAssassin)?
- What is SpamAssassin and how does it work?
- What does a high spam score mean?
- How can I check the potential spam score of my email?
- What’s a scoring threshold (e.g., 5.0 = spam)?
- What are weighted signals in spam filtering?
- How do content, authentication, and engagement contribute to score?
- How do user complaints influence future filtering?
- What’s a “false positive” and “false negative”?
- How are feedback loops integrated into filter scoring?
- What’s the difference between IP and domain scoring?
- What’s the impact of frequency and volume on filter scoring?
- How does history of sender activity affect scoring?
- How do filters adapt when your sending patterns change suddenly?
- How can reputation recovery reset filter weighting?
Content Filtering Triggers
- What words or phrases trigger spam filters? (e.g., "free," "Viagra," urgency words)
- Does using ALL CAPS trigger spam filters?
- Does excessive punctuation trigger spam filters?
- Can images or HTML code trigger spam filters?
- Can links trigger spam filters (e.g., URL shorteners, number of links)?
- How can I avoid content-based spam triggers?
- Do “spammy” words really matter?
- What’s the myth vs reality of “buy now” and “free”?
- How do excessive punctuation or emojis impact filters?
- What’s the truth about using images only in email?
- How do bad HTML practices trigger filters?
- How do link mismatches raise red flags?
- Why does reply tracking or open tracking sometimes hurt?
- Do too many CTAs trigger filters?
- Does using all caps matter?
- Do shortened URLs harm deliverability?
- How do attachments affect spam filtering?
- Why is “from name” manipulation dangerous?
- How do deceptive reply chains trigger spam rules?
- How do filters detect template repetition across domains?
- What are myths that no longer apply (e.g., keyword stuffing)?
Blocklists - Overview
- What is an email blocklist (blacklist)?
- How do blocklists work?
- What are the major email blocklists (e.g., Spamhaus, Spamcop, Barracuda, SORBS)?
- How do I find out if my IP or domain is on a blocklist?
- What causes an IP/domain to get listed?
- How do I request removal from a blocklist?
- Does being on one blocklist affect my reputation everywhere?
- What are the main types (IP, domain, URI)?
- What’s the difference between blocklist and spam filter?
- What’s the difference between DNSBL and RBL?
- Who maintains blocklists (Spamhaus, Barracuda, etc.)?
- How are IPs or domains added to blocklists?
- How are listings propagated between services?
- What’s the difference between a public vs private blocklist?
- What’s the difference between a reputation list and a blocklist?
- How does delisting work?
- What are spamtraps and how do they cause blocklisting?
- What’s the difference between pristine and recycled spamtraps?
- What are typotraps or honeytraps?
- What’s the relationship between Spamhaus and major ISPs?
- How can one list affect multiple ESPs?
Major Blocklists & Services
- What is Spamhaus (ZEN, DBL, etc.)?
- What is SURBL?
- What is URIBL?
- What is Barracuda Reputation Blocklist?
- What is Proofpoint?
- What is Invaluement?
- What is Lashback?
- What is Spamcop?
- What is Cloudmark CSI?
- What is Return Path Certification (vs blocklisting)?
- How does Microsoft SNDS relate to blocklisting?
- How do security vendors integrate with DNSBL data?
- What is a "URI-based" blocklist and how is it triggered?
- What is the impact of being on multiple blocklists?
- How do blocklists detect cold domains?
- What should I do before requesting removal from any blocklist?
- Complete blocklist impact reference: Which lists matter most?
- What is SORBS and how do I get delisted?
- What is the CBL (Composite Blocking List) and how do I get delisted?
- What is UCEPROTECT and why is it controversial?
- What is Spamhaus PBL and is it a bad listing?
- What is Abusix Mail Intelligence?
- What is Mailspike?
- What is Sender Score and how does it relate to blocklisting?
- What is SpamRats and its specialized lists?
- What is PSBL (Passive Spam Blocklist)?
- What is DroneBL?
- What is Backscatterer?
- What is blocklist.de?
- What are the abuse.ch blocklists?
- What is Cymru Bogons?
- What is WPBL?
- What is 0spam (Fusionzero)?
- Quick reference: Low-impact blocklists you may encounter
- Which blocklists have shut down or are defunct?
- What are Spamhaus CSS and DROP lists?
- What domain blocklists (DBLs/RHSBLs) should I monitor?
- How do I set up automated blocklist monitoring?
- Complete blocklist directory: All major IP and domain blocklists with lookup and delisting URLs
Blocklist Prevention & Removal
- How do you prevent being blocklisted?
- What is list hygiene’s role in blocklist prevention?
- What’s the difference between proactive and reactive reputation management?
- How to identify which blocklist caused the delivery issue?
- How to request delisting safely?
- What are “manual review” vs “automatic” delistings?
- What is a blocklist monitoring service?
- How often should blocklist checks be run?
- How do ESPs handle blocklist events?
- What are common mistakes when requesting delisting?
- How to communicate professionally with blocklist maintainers?
- How to test domain/IP after delisting?
- Can blocklisting be permanent?
- How can a single bad campaign cause multi-listing?
Corporate & Security Filters
- What are enterprise email gateways?
- How do security filters differ from spam filters?
- What is anti-virus scanning in email?
- How do phishing detection systems flag legitimate senders?
- What’s the difference between attachment filtering and content filtering?
- What are sandbox environments in email filtering?
- How do companies whitelist senders?
- What’s the role of reputation systems like Proofpoint TAP or Cisco Talos?
- How do security filters evaluate link reputation?
- What’s the risk of sending to corporate aliases or role addresses?
- What’s the difference between SPF alignment failure and security rejection?
- What does “blocked by policy” mean in bounce codes?
- How do DLP (Data Loss Prevention) filters affect delivery?
Filter Testing & Diagnostics
- How can you test spam score before sending?
- What tools measure content and header compliance?
- What is seed list testing for inbox placement?
- How to interpret GlockApps, Mail-Tester, or Postmaster results?
- What’s the difference between spam score and placement test?
- What is fingerprint matching and why does it matter?
- How to test for blocklist impact on inboxing?
- How do you identify which layer blocked you (ESP, ISP, filter, recipient)?
- How to use SMTP logs for spam-filter diagnosis?
- What is “reputation isolation” testing?
- How can test sends backfire if overused?
- What are signs you’re triggering user-level filters?
ISP Filtering Logic Variations
- How does Gmail filter emails?
- How does Outlook/Hotmail filtering differ?
- What is Outlook's Focused Inbox?
- How does Outlook decide if an email goes to Focused or Other?
- How does Outlook's Junk Email filter work?
- Can I influence placement in the Focused Inbox?
- How does Yahoo Mail filter messages?
- How does Yahoo Mail's spam filtering work?
- How are spam complaints handled by Yahoo/AOL?
- Are there specific requirements for sending to Yahoo/AOL?
- How do smaller regional providers filter?
- What’s the difference between MTA-level and inbox-level filtering?
- How do ISPs build sender reputation databases?
- What signals do Gmail and Yahoo share publicly (Postmaster, FBL)?;
- How does Gmail’s “engagement-based filtering” work?
- How can Gmail promotions tab affect deliverability?
- What is “smart foldering” vs “spam foldering”?
- How do providers test new filter rules?
- How often do ISPs update their models?
- What is a “probation period” for new senders?
Engagement & Behavioral Signals in Filtering
- How does engagement influence filtering?
- What actions count as positive signals (opens, clicks, replies, moves to inbox)?
- What actions count as negative signals (deletes, spam reports, ignores)?
- How fast do engagement signals influence reputation?
- How do filters use engagement across users (crowdsourced learning)?
- What’s the difference between user-level and aggregate engagement?
- How can content and engagement signals interact?
- How do filters detect “fake” engagement (bots, internal opens)?
- How does Apple’s MPP confuse engagement-based filters?
- How does long-term engagement consistency affect placement?
- How do low engagement senders get gradually suppressed?
Myths, Misconceptions & Realities of Filtering
- Do spam filters read every email?
- Are spam filters biased against new senders?
- Does volume alone cause spam filtering?
- Can a clean IP still be filtered?
- Does having high engagement guarantee inboxing?
- Do filters penalize promotional design or HTML?
- Can you “trick” spam filters with wording?
- Do filters share blacklists across providers?
- Are spam filters transparent or secretive by design?
- Why is testing across multiple ISPs essential?
- What’s the truth about “sender score” vs “filter reputation”?
- How do AI filters differ from traditional ones?
- Can you ever be fully “whitelisted”?
Trust beats tactics.
Review My Emails · Email Almanac