What’s the difference between a reputation list and a blocklist?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
A blocklist gives you a yes or no. Your IP or sending domain is on the list, or it isn't. If it is, mail to operators who consult that list gets rejected, quarantined, or scored heavily toward spam. Spamhaus ZEN, SpamCop, and SORBS all work this way. You query the list with a DNS lookup, you get back a return code, and the receiving server acts on it. There is no shade of grey. See what happens during SMTP connection filtering for how this plays out at the protocol level.
A reputation list is a score, not a verdict. Instead of "listed or not," you get a rating that says how trusted your sending IP or domain is right now. Validity's Sender Score rates senders from 0 to 100. Google Postmaster Tools puts your domain and IP reputation into four buckets: bad, low, medium, high. Cisco Talos returns Poor, Neutral, Good. Microsoft SNDS shows a red/yellow/green colour for spam complaint rates per /24.
The practical difference is how receiving servers use the data.
Blocklist hit: the receiver usually returns a 5xx permanent rejection at SMTP time with a message that names the list. You see it in your bounce logs immediately. The mail never enters the inbox pipeline. We cover this in 5xx permanent vs 4xx temporary rejection.
Reputation score: the receiver accepts the message, then uses the score as one input among many when deciding inbox, tabs, spam, or quarantine. A "low" Gmail reputation does not mean Gmail rejects you. It means Gmail is more likely to route you to spam, throttle your throughput, or send you to Promotions instead of Primary. See what signals do spam filters look at for the other inputs in play.
Who uses what:
- Corporate gateways and on-prem mail servers (Barracuda, Proofpoint, on-prem Exchange with anti-spam plugins) lean heavily on blocklists. They query Spamhaus, SURBL, URIBL, Invaluement and act on the result.
- Consumer mailbox providers (Gmail, Yahoo, Outlook.com) run their own internal reputation systems and barely touch public blocklists. Gmail does not publish its reputation algorithm but it watches user complaints, spam folder placement, opens, deletes-without-opening, and authentication results. See Yahoo's sender best practices for what they care about.
- Most filtering vendors use both. A Spamhaus hit might add 4 points to a spam score, your Sender Score might add or subtract a few, content rules add more, and a threshold of say 5.0 puts you in spam.
Why this matters for you:
If you only watch blocklists, you will miss the slow reputation decline that puts you in Gmail spam for a month before anything obvious breaks. Sender Score and Postmaster Tools are leading indicators. A Spamhaus listing is a lagging one, the alarm that fires after the fire started.
If you only watch reputation scores, you can get blindsided by a sudden SBL or CSS listing that takes you off the air at corporate domains overnight, even while your Gmail reputation looks fine.
Check both. We monitor public blocklists on a schedule and pull Postmaster Tools data weekly. A clean blocklist record plus a "high" Gmail reputation is the baseline. Anything else is a problem to investigate, not ignore.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.