Too many spam emails sent

[Taha Haider]

Hi,

I have allowed limited the number of emails sent through the cPanel server, 30 emails per hour.

Yet, somebody was able to spam 6 thousand email through the "contact form" of the hosted website on the server in less than 24 hours.

How can I totally resolve this issue & i can get alert if 100 emails are more sent

 

[cPanelLauren]

Hello,


I think the following documentation may be helpful for this situation:

How to Set Email Send Limits - cPanel Knowledge Base - cPanel Documentation
How to Prevent Spam with Mail Limiting Features - cPanel Knowledge Base - cPanel Documentation

Thank you!

 

[Taha Haider]

Hi,

I have exactly same settings but yet again my server was victimized.
What settings am I missing?

Kindly check mail report in send.png & mail settings in tweak.png

 

[cPanelLauren]

Hello,

The report you provided shows the total amount of email sent over the course of 2 days. You are also showing the max hourly emails set to 50 but if the max hourly emails is set to 50 and they're either not reaching that or reaching it then sending more as soon as it's cleared it's fully possible they could continue to send mail.

What do you have set for the following two tweak settings?

Maximum percentage of failed or deferred messages a domain may send per hour
The maximum percentage of a domain’s outgoing mail that can consist of failed or deferred messages. Once the domain exceeds this percentage, it is temporarily blocked from sending mail.

Number of failed or deferred messages a domain may send before protections can be triggered
When a domain sends this number of failed or deferred messages in an hour, and the “Maximum percentage of failed or deferred messages a domain may send per hour” has also been reached, the domain will be temporarily unable to send outgoing mail.

 

[Taha Haider]

Maximum percentage of failed or deferred messages a domain may send per hour
The maximum percentage of a domain’s outgoing mail that can consist of failed or deferred messages. Once the domain exceeds this percentage, it is temporarily blocked from sending mail.

- Default 125 %

Maximum percentage of failed or deferred messages a domain may send per hour

- unlimited

 

[cPanelLauren]

Hi @Taha Haider

You may want to use the documentation here:

How to Prevent Spam with Mail Limiting Features - cPanel Knowledge Base - cPanel Documentation

To configure these

 

[Taha Haider]

Sure, I will but can you provide recommended settings ?? & is there any other settings which I need to configure to avoid this in future?

 

[cPanelLauren]

Hello,


I would leave this setting:

Number of failed or deferred messages a domain may send before protections can be triggered

At its default value - meaning 5 failed deferred messages need to be sent before the system starts counting.

for:

Maximum percentage of failed or deferred messages a domain may send per hour

This is pretty much up to what you want to set it to - a conservative number like 50% would mean that if a domain sent 20 emails and 10 of them failed or were deferred in one hour, the account would be temporarily blocked from sending mail.


Thanks!