Using the Spam Filters and SpamAssassin Interface in cPanel

cPanel Tutorials and How To Guides

User friendly interface, Rich features set integrated into cPanel

Setting up Spam Filters

Updated: January 3, 2025
By: RSH Web Editorial Staff

Contact Us


Menu

cPanel - Email - Spam Filters

Spam Filters
A spam filter is a program used to detect unsolicited, unwanted and virus-infected emails and prevent those messages from getting to a user's inbox.

YouTube Video Tutorials - cPanel Spam Filters

The "cPanel Spam Filters" YouTube video tutorials guide users through setting up and managing spam filters in cPanel. Viewers learn how to customize settings to reduce unwanted emails, configure blacklists and whitelists, and utilize spam score thresholds. These tools empower users to maintain a cleaner inbox and enhance email security.

This feature allows you to configure the spam filter settings that is powered by Apache SpamAssassin for your hosting account

These filters identify and sort or delete unsolicited spam email.

You can also use this interface to configure your whitelist and blacklist settings.

Spam Filters

Process New Emails and Mark them as Spam

Set this toggle to enabled to identify potential spam. Apache SpamAssassin examines every message for spam characteristics and assigns them a calculated spam score. This calculated spam score helps determine the likelihood that a message contains spam.

The Spam Box and Auto-Delete features require that you enable Apache SpamAssassin first.

Note: You cannot disable Apache SpamAssassin if your hosting provider enables the Apache SpamAssassin™: Forced Global ON setting in WHM’s Exim Configuration Manager interface Spam Threshold score

If the system calculates a spam score for a message that meets or exceeds the Spam Threshold Score setting, the system marks the message as spam.

A lower spam threshold score, such as a one, is aggressive and labels many messages as spam, including messages that may not be spam.

However, a higher value, such as a ten, is passive and only labels messages that are obviously spam.

To set the spam threshold value, perform the following steps:

1) Click Spam Threshold Score. The system directs you to the Adjust Spam Threshold Score interface.

2) Select the desired value from the menu.

Note: Select Custom from the menu to enter a custom value.

3) Click Update Scoring Options to save your changes.

Move New Spam to a Separate Folder (Spam Box)

Set this toggle to enabled to configure the Exim service to create a spam folder the next time that you receive spam mail. Spam Box sends any message with a calculated spam score that exceeds the spam threshold score to this folder.

This feature preserves email that Apache SpamAssassin may mistakenly classify as spam mail.

Note: We recommend that you use Spam Box because you can still view the messages. However, you should occasionally empty this folder because the space that it uses counts towards your email quota limit.

Empty the Spam Box folder

To empty the spam folder or remove selected messages, click Configure Spam Box Settings. The system directs you to the Spam Box interface with the following settings:

  • • Enable the Spam Box is enabled. toggle in this interface to activate the Spam Box feature if you did not do so in the Spam Filters interface.
  • • Click Empty the Spam Box folder for “username” to delete all messages in the spam folder for the system user email account, where username represents the system user email account’s name.
  • • Click Empty all Spam Box folders to delete all messages in the Spam Box for every email address on this account, including the system user email account.
  • • Click Manage disk usage to select which messages you want to remove. The system directs you to the Email Disk Usage interface.

Important: This setting deletes the spam folder contents for all email addresses on the account.

POP3 client users

If you check your email through a POP3 client, access and empty your spam folder with the youraddress@example.com/spam username and your email account password.

If you do not delete messages in this folder frequently, spam may accumulate and cause you to reach your email account quota.

Note: You cannot use this method to access other folders on your account. Some webmail clients may require additional steps. For more information, see How to Set Up Webmail Folders documentation.

If you are unsure whether you use POP3 or IMAP to receive mail, search for this information in your email application’s Preferences interface.

The Spam Box feature is unavailable

Important: If you don’t enable the Spam Box feature but you enable Apache SpamAssassin, Apache SpamAssassin delivers the message to the email account’s inbox as normal. However, the message’s subject line will contain the phrase SPAM if your hosting provider enables the Apache SpamAssassin™: X-Spam-Subject/Subject header prefix for spam emails setting in WHM’s Exim Configuration Manager interface.

Note:You can create filters for spam messages for all of your email accounts in cPanel’s Global Email Filters interface, or for individual accounts in the Global Email Filters interface. Use email filters to direct spam if the Spam Box feature does not appear in your interface.

Automatically Delete New Spam (Auto-Delete)

Set this toggle to enabled to automatically delete messages that meet or exceed the Auto-Delete Threshold Score value.

Important: Make certain that you properly configure the Auto-Delete Threshold Score value. This permanently deletes all messages with a calculated spam score that meets or exceeds the Auto-Delete Threshold Score value. This could include non-spam messages, which would cause you to lose those messages.

Configure Auto-Delete Settings

Click Configure Auto-Delete Settings to configure the Auto-Delete Threshold Score value. The system directs you to the Auto-Delete interface with the following settings:

Enable the Spam Auto-Delete is enabled. toggle in this interface to activate the Auto-Delete feature if you did not do so in the Spam Filter interface.

Select the desired Auto-Delete Threshold Score value. Click Update Auto-Delete Score to save your changes.

Note: The Auto-Delete Threshold Score value does not affect the Spam Threshold Score value.

Additional Configurations (For Advanced Users)

This section allows you to customize the whitelist, blacklist, and individual test scores.

Important: Only advanced users should configure these settings.

Click Show Additional Configurations to display the additional configuration settings.

Whitelist (Emails Always Allowed)

This section displays the account’s current number of whitelisted items. Whitelists allow you to receive email from an email address that Apache SpamAssassin falsely marks as spam.

Click Edit Spam Whitelist Settings to configure the Spam Filters whitelist settings. The system directs you to the Whitelist interface.

Note: When you add addresses to the whitelist, use * as a wildcard to represent multiple characters and ? to represent a single-character wildcard. The following examples demonstrate how to properly use wildcards in the whitelist:
user@example.com - Whitelists a single email address.
*@example.com - Whitelists all the addresses at example.com.
?ser@example.com - Whitelists a single character in an address at example.com (for example, user@example.com, but not Auser@example.com).

To add an email address to the whitelist, perform the following steps:

1) Click Add A New “whitelist_from” Item to add an email address.

2) Enter the email address in the whitelist_from text box.
• Click the cancel icon (Cancel) to remove a whitelist_from entry.

3) Click Update Whitelist (whitelist_from) to save your changes.

Blacklist (Emails Never Allowed)

This section displays the account’s current number of blacklisted items.

Blacklists allow you to mark emails that Apache SpamAssassin falsely marks as non-spam as spam mail.

Click Edit Spam Blacklist Settings to configure the Spam Filters blacklist settings. The system directs you to the Blacklist interface.

Note: When you add addresses to the blacklist, use * as a wildcard to represent multiple characters and ? to represent a single-character wildcard. The following examples demonstrate how to properly use wildcards in the blacklist:
user@example.com - Blacklists a single email address.
*@example.com - Blacklists all the addresses at example.com.
?ser@example.com - Blacklists a single character in an address at example.com (for example, user@example.com, but not Auser@example.com).

To add an email address to the blacklist, perform the following steps:

1) Click Add A New “blacklist_from” Item to add an email address.

2) Enter the email address in the blacklist_from text box.
• Click the cancel icon (Cancel) to remove a blacklist_from entry.

3) Click Update Blacklist (blacklist_from) to save your changes.

Note: To blacklist email addresses on multiple accounts, use the Exim System Filter File.

Calculated Spam Score Settings

Warning: We strongly recommend that only advanced users edit the spam testing scores. Improper configurations will create unintended consequences.

Click Configure Calculated Spam Score to configure the individual test scores. The system directs you to the Calculated Spam Score Settings interface.

Apache SpamAssassin uses hundreds of tests, and you can assign scores to individual tests to configure Apache SpamAssassin for your server. Use this interface to modify the individual test scores that Apache SpamAssassin uses to mark a message as spam. You can increase the score of a test that incorrectly allows spam messages to pass through. Conversely, you can disable or reduce the score of a test that falsely marks messages as spam. For example, disable tests that mark bankruptcy emails as spam for a user who is a bankruptcy lawyer.

To update an individual test score, perform the following steps:

1) Click Add A New “scores” Item to enter a new customized test score.

2) Select a test from the "scores" menu.

3) Enter a new value in the text box that contains up to three decimal places.

Note: Set the score value to 0 to disable a test.

4) Click Update Scoring Options to save your changes.

Note: To review the default scores, run the following command:

grep -R score /var/lib/spamassassin/* | less

Tweet  Share  Pin  Email

We welcome your comments, questions, corrections and additional information relating to this article. Please be aware that off-topic comments will be deleted.
If you need specific help with your account, feel free to contact us anytime
Thank you

Freshly brewed by our master copywriters

RSH Web Services offers different cPanel hosting packages which are tailored to your needs. From personal, professional to business websites. We have a package that will fit your budget and needs, our reliable hosting services will work for you