THIS +100

There are two parts to the reputation issue:   

Some people have suggested creation of a reputation sharing mechanism between SmarterMail users, and I am happy to facilitate an informal process by sharing my reputation lists, just send me a private message.   

But before you ask, consider how you are going to use the data, because any list of bad actors is going to be big.   I do not consider either SmarterMail or Declude to be usable repositories for a long list of blocked names.  Currently, my email address block list is just under 4000 entries and my Server name block list is just under 1000 names.   Both lists grow almost daily based on incoming data.

My design uses custom Declude filters, SQL stored procedures, and indexed SQL tables so that:

Without these aggregation tricks, the lists would need even more entries, and the result would still have holes caused by unlisted subdomains.

My question would be, report them to whom?  I'm sure that would be a popular option if there was a way to automate reporting, but the million-dollar question is where.  There's not a centralized global clearinghouse for spam reporting, so my assumption would be this would have to be a multi-pronged backend app to submit headers to SpamCop, Spamhaus, and several noteworthy others.  Not a small task.
 

This is not something that would work well, and could easily be abused by reporting competitors and other legit email as spam "just because". You'll have to build your spam rules and such around blocking as much as you're able. Emails that may pass SPF/DMARC and such don't necessarily mean the whole company needs a reputation change if there was a single PC or account that was compromised into sending out things as well. While the suggestion sounds good, it is not really feasible.

Correct.  And what one person considers spam might be another person's "glad I received this" email.  We've participated in feedback loops for years, and it's amazing how many people report legit list-mail as spam after they voluntarily *subscribed* to the list at some point in the past (and we have the subscribe logs as documentation).  Years ago we saw tons of AOL subscribers reporting 'spam' which came to us via feedback loop, that was legitimate person-to-person email.  Clearly they did a Select-All on their Inbox and hit the Spam button, which we always thought AOL made WAY too easy.

Side note:  I'm amazed at how much spam our system gets on a daily basis from Gmail and Microsoft Online.  Tons of compromised accounts spewing it like geysers, but they are "too big to block".

 

Not compromised accounts, computer generated ones