Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Removed an A record, reduced spam considerably

Discussion in 'E-mail Discussions' started by Mango45, Feb 2, 2017.

Tags:
  1. Mango45

    Mango45 Active Member

    Joined:
    Apr 21, 2009
    Messages:
    42
    Likes Received:
    1
    Trophy Points:
    58
    Location:
    Canada
    cPanel Access Level:
    Website Owner
    For some time I have been having an inbound spam problem. My web host uses Google's DNS, so some of the good RBLs don't work. For various reasons I don't want to change website hosts nor my email address.

    Yesterday a friend of mine told me he had a mail server server with very accurate spam filtering, and offered to let me use it. So I changed my MX record accordingly. I was surprised to note all my legitimate email went to the new server, but the spam continued to arrive on the old server.

    I removed the A record for my domain name, and the spam near-instantly stopped. For some reason, the spammer or spammers have been using the A record rather than MX record to determine my mail server.

    My website is now located at www.example.com instead of example.com. The people who have old https links will be boned, but they'll hopefully figure it out.

    The spam had the interesting characteristic of two identical spams arriving 1-5 minutes apart. Topics were always different. I'd receive up to 10 a day, and they always seemed to slip past the RBLs my web host does use.

    Has anyone else noticed such a thing?
     
    #1 Mango45, Feb 2, 2017
    Last edited: Feb 2, 2017
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,419
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    It's possible the spammers were using a script that determines the mail server IP address by checking the IP address associated with the domain name. Once that stopped responding, the script likely stopped sending the email. Ideally, you should consult with your web hosting provider to see if they can add additional measures to help stop the incoming SPAM on the server.

    Thank you.
     
Loading...

Share This Page