What is the best way to block inbound spam emails?

[lewis-teck]

Hi,

I logged in to an email account on a website that I manage, to find a bunch of spam emails. There can be anywhere from 0 to 10+ being sent in a day, which isn't ideal especially since the emails in this account get forwarded directly to the client (a family member).

I do not wish to receive such emails anywhere on my server, so what would be the best way to block the domains or originating IP's of those emails, server-wide?

Boxtrapper, Spamassassin and similar tools are great but not suitable nor apply everywhere.

Thanks!

 

[Ameya Barwe]

You should enable RBL's option in the WHM > Exim Configuration Editor to fight with inbound spam emails to your server.

Or you can also check this blog post :- 3 cPanel & WHM Add-ons For Fighting Spam Email | cPanel Blog

 

[lewis-teck]

You should enable RBL's option in the WHM > Exim Configuration Editor to fight with inbound spam emails to your server.

Or you can also check this blog post :- 3 cPanel & WHM Add-ons For Fighting Spam Email | cPanel Blog

Thank you for your reply. Surprisingly, I never knew of the RBL's feature. I have enabled the two lists and hope that this will have a positive impact, especially as it is server-wide.

However, for the emails that do get through, is there any way that I can manually list IP's of emails to block? I'm aware that I can report spam directly to the RBL providers however surely there is some way to ultimately remain in control?

Thanks!

 

[cPanelMichael]

Hello,

I'm glad you were able to learn about the RBLs you can enable in Exim Configuration Manager. To answer your additional question, yes, you can block emails from specific IP addresses. This is handled through the Access Lists tab in "WMH >> Exim Configuration Manager":

Exim Configuration Manager - Basic Editor - Documentation - cPanel Documentation

Choose the Access Lists tab, and utilize the Blacklisted SMTP IP addresses option to block emails from specific IP addresses.

I hope this helps.

Thanks!

 

[Ameya Barwe]

There is one more option that you should think to enable :-

"WHM >> Exim Configuration Manager" under the "ACL Options" tab to help prevent these types of emails:

"Reject SPF failures"

 

[lewis-teck]

Thank you for your suggestions, however it appears that all of the options discussed in those last two posts above relate to SMTP - which of course, is outgoing mail. Even the access lists are named "Blacklisted SMTP IP addresses" or something. I am only looking to block certain IP's of incoming mail.

Thanks

 

[cPanelMichael]

I am only looking to block certain IP's of incoming mail.

Hello,

I suggest blocking the IP using a firewall management utility such as CSF:

ConfigServer Security & Firewall

Thank you.