Block All Mail from hosting provider?

[Bashed]

Nothing but spam, phishing emails from OVH.net.

How do I block ALL incoming mail originated from OVH IPs? Can it be done in Spam Expert, Spam Assassin or even CSF?

 

[keat63]

For a CPANEL domain only, create a global filter in Cpanel

For a whole server, the easiest solution would be to install CSF Mailscanner, but it's not free.
Or modify exim and create an exim_blacklist (search exim_blacklist, there are lots of threads covering this)

Alternatively, you could add the range of IP's to CSF.

https://bgp.he.net/AS16276#_prefixes

Although this could be risky, from what I can make out, OVH are an ISP, so you may also block web traffic.

 

[Bashed]

New For a CPANEL domain only, create a global filter in Cpanel

So something like "any header" containts "ovh.net"?

 

[keat63]

I guess any combination of:

headers contains, from contains or from ends with would do what you want.

I guess just be mindful that zzovh.net (made up TLD), contains ovh.net, so it has potential still to trip you up, albiet a low risk though.
Could you use a wildcard ?
Eg: If FROM contains *.ovh.net"

 

[cPanelMichael]

So something like "any header" containts "ovh.net"?

Hello @Bashed,

I recommend filtering the "FROM" field instead of "Any Header". Using "Any Header" could result in your server blocking emails from other servers that happen to have that domain in the email header. The following document offers some filtering tips:

How to Configure Mail Filters - cPanel Knowledge Base - cPanel Documentation

Thank you.