Stopping Spam from .eu Email Addresses

[outtacontext]

I'm a website owner using and ISP that uses cPanel. I am trying to stop the huge amount of spam that is coming in from email addresses from .eu.

I've created cPanel spam filters for the IP addresses but that could take me forever as these emails come in from new IPs all the time.

Instead I was trying to do a regex to discard any emails that came in from .eu. I created a rule for all email accounts but .eu emails are still getting through. Here's the rule I created:



Can someone recommend a better rule or another method for filtering .eu spam and discarding it? Thanks.

 

[cPanelMichael]

Hello

Have you enabled SpamAssassin? Note that you may want to report this issue to your web hosting provider so they can address this issue with a global filter or a modification to the Exim configuration.

Thank you.

 

[outtacontext]

I do have SpamAssassin and I have configured the blacklist in the cPanel for various domains. But I want to blacklist an entire TLD. So would the syntax be *.eu?

 

[cPanelMichael]

You may find the following thread (and the other thread linked in it) helpful:

Blocking SPAM with cPanel filters

Thank you.

 

[outtacontext]

Thank you but I didn't understand how I could get to that area of my shared server to make the file.

Can you or someone just answer my last question? I want to know if there is a way of blocking a TLD on a web screen within the cPanel SpamAssassin (without going into the file structure). If the answer is "no," I will have to contact my ISP to get more information. But if I can do it within the cPanel that would be my first choice. Thanks.

 

[cPanelMichael]

Yes, per our documentation:

When you add the addresses to the blacklist or whitelist, use * as a wildcard to represent multiple characters and ? to represent a single-character wildcard. The following examples demonstrate how to properly use wildcards in the blacklist:
[email protected] — Blacklists or whitelists a single email address.
*@example.com — Blacklists or whitelists all of the addresses at example.com.
[email protected] — Blacklists or whitelists a single character in an address at example.com (for example, [email protected], but not [email protected]).

Source:

Apache SpamAssassin

Thank you.

 

[outtacontext]

Thank you. But my question was how to block an entire TLD, not just a domain. So, can you either point me to the documentation that outlines the syntax for that or provide the syntax that I can use to set up a rule. I found out from my ISP that I do not have access to the file structure beyond my home directory on the shared server. So, I have no access to anything related to exim.

 

[cPanelMichael]

You could try some of the filter suggestions in this thread:

Account Level Filters for .eu

Thank you.

 

[outtacontext]

Thanks. That's helpful.