> I don't doubt what you are saying. But if AWS is so horrible and across the board everyone thinks > anything coming from it is spam, SA isn't flagging it, and mail-tester.com isn't flagging it, > and both have pretty extensive blacklist references (??). I'm still confused.
Because they are paying to be whitelisted. Amazon used to be in the top 10 of abuse networks[1]. The only way to get of such a list fast, is either blocking all outgoing traffic on ports 25,465,587 or pay someone. I have had to reconfigure spamassassin not to use the whitelists. Sooner or later more will do this, because what use is a whitelist, if it holds ip addresses that send out spam? Furthermore tools can't be trusted that much. I am blocking dns request from some of those tools. I am even blocking amazon cloud on the web servers, saves lots of cpu power! This year I am going to advise all clients (not so many any more, grrrr ;) that if they do not have robots.txt on their website we are going to put a default one. That one allows the most common search engines (I certainly do not want to give google an advantage here). From a security perspective this is also advisable because hackers are scanning for old versions, and without such a robot text, I really do not have good reason to report abuse. [1] https://www.spamhaus.org/statistics/networks/
