Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Prevent PHP Mail() from sending mails from identified emails

Discussion in 'E-mail Discussion' started by jk_dc, Feb 20, 2019.

Tags:
  1. jk_dc

    jk_dc Registered

    Joined:
    Apr 20, 2018
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Pakistan
    cPanel Access Level:
    Root Administrator
    Hello

    We have been facing alot of email spam issues and have been following logs to suspend/notify customers about email spamming from their account.

    We are looking for the following optimizations on our server to prevent compromised code to even generate email - here are the questions:

    1) Is there a way to prevent/block emails that being sent using php mail function if "to" email account is already created in cPanel - idea is to block all such request where unidentified emails are being used to send out spam.

    2) Any way to let PHP mail function send emails to email accounts existing within cPanel? - this is way if a contact form uses php mail, we will ask user to and from email that exist in cPanel.

    I am aware that we can block php mail functions entirely and use SMTP for the mails, this is going to break alot of end user codes and will be a mess at this time for us - so we are trying to find around other solutions that can help us prevent spam.

    3) What is the best practices being used by web hosting providers here? Do they keep php mail functions enabled? If yes, what are the best precautions to be followed.

    Thanks in advance for the help - looking forward to hear back.
     
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,331
    Likes Received:
    2,161
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @jk_dc,

    The following documents offer useful advice if you have not already read them:

    How to Prevent Email Abuse - cPanel Knowledge Base - cPanel Documentation
    How to Prevent Spam with Mail Limiting Features - cPanel Knowledge Base - cPanel Documentation

    You may also find some of the information on the following thread helpful:

    SOLVED - How to prevent all cPanel PHP mail() to be sent from server hostname?

    In terms of controlling the type of emails allowed through the PHP Mail function, you might be able to do this with a custom Exim system filter rule. I don't have an example to offer, but theoretically you could develop a rule that checks for specific aspects of the message header (to detect messages sent via the PHP Mail function) and then if/then scenarios that block the emails if certain conditions are met. This level of rule is outside our scope of support, but the Exim User's mailing list is often a useful resource.

    While it might involve more work at the beginning, working with your customers to have them use SMTP authentication is likely the better long-term approach. Most of the popular PHP scripts (e.g. WordPress) offer methods to force the use of SMTP authentication.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice