I use tom@hotmail.com as my default bogus email address. Tom has subscribed to so many things because of me. This is why address verification doesn’t work. The address tom@hotmail.com is a real address. It exists. It accepts mail. And at least one person admits to signing up Tom for mail that the person doesn’t want. I’m sure he’s not the only one. <- 250 OK -> MAIL...
Just yesterday a group of delivery folks were discussing email verification services over IRC. We were talking about the pros and cons, when we’d suggest using them, when we wouldn’t, which ones we’ve worked with and what our experiences have been. I’ve been contemplating writing up some of my thoughts about verification services but it’s a post I wanted to spend...
Spam is still 80 – 90% of global email volume, depending on which study look at. Most of that spam doesn’t make it to the inbox; ISPs reject a lot of it during the SMTP transaction and put much of rest of it in the bulk folder. But as the volumes of spam have grown, ISPs and filters are relying more and more on automation. Gone are the days when a team of people could manually review...
I’ve written about B2B filtering in the past, but I don’t blog too much about corporate filtering overall. The reason for this is that the corporate landscape is a lot broader and less consistent than the consumer space. That makes it much more difficult to tell senders how to handle corporate filtering, because each corporation is different. But as I think I about it, I realize...
A throwback post from a few years ago on IP reputation. Why IP addresses? ISPs built reputation around IP addresses because it was one bit of data that malicious senders / spammers couldn’t forge. The connecting IP is a fundamental part of the network transaction and if you forge an IP then SMTP can’t work. Because that was the reliable data they had to work with, that’s what they used. Even now...
People make all sorts of claims about typo traps. One claim that showed up recently was that Spamhaus has just started using typo traps. I asked my Facebook network when people started using typos to detect incoming spam. Two different colleagues mentioned using typos, both on the left hand side and the right hand side, back in ’98 and ’99. The point is, typo traps are absolutely...
A few weeks ago, I signed up for a webinar from the DMA. As is my normal process I used a tagged address. I don’t remember any notification that I would be signing up for mail, and I generally do look for those kinds of things. I also know a lot of webinars are used to drive sales processes and I prefer not to waste sales time if I’m not actually looking to purchase. In recent weeks I...
It seems one of the most asked questions I hear from people is about filters and what the secret sauce is. Cloudmark’s processes which determine which IPs get a poor or suspect reputation in our CSI products, take into account many different factors, including both spam trap hits and volume of trusted end user complaints (hitting the “This is spam” button), reputation of the reverse DNS of the...
It’s been a busy and exciting month for us here. Laura finished a multi-year project with M3AAWG, the Messaging, Malware and Mobile Anti-Abuse Working Group (look for the results to be published later this year) and continued working with clients on interesting delivery challenges and program opportunities. Steve focused on development on the next version release of Abacus, our flagship abuse...
Tell someone they have hit a spamtrap and they go through a typical reaction cycle. Denial: I didn’t hit a trap! I only send opt-in mail. There must be some mistake. I’m a legitimate company, not a spammer! Anger: What do you mean that I can’t send mail until I’ve fixed the problem? There is no problem! You can’t stop me from mailing. I’m following the law. My...
RSS - Posts