How to enable spam protection in cPanel

Your Kualo hosting includes spam filtering to keep unwanted email out of your inbox. The exact tool you see in cPanel depends on the type of server your account is on:

• On our shared hosting, you use the Professional Spam Filter (powered by SpamExperts).
• On reseller, VPS, and dedicated servers that do not use the Professional Spam Filter, you use the built-in Spam Filters tool (Apache SpamAssassin) instead.

cPanel also includes BoxTrapper on all server types if you want an extra, stricter layer of filtering.

Professional Spam Filter (shared hosting)

The Professional Spam Filter (powered by SpamExperts) scans your incoming mail on dedicated filtering servers and holds suspected spam in a quarantine, so it never reaches your mailbox. It is the spam tool we recommend for every account.

1. Log in to cPanel and, in the Email section, click Professional Spam Filter.

   

2. The List Domains page shows every domain on your account. Click Login next to the domain you want to manage.

3. That domain's spam dashboard opens in a new tab, where you can review quarantined messages, train the filter, and manage your allow and block lists.

For a full walkthrough of the dashboard, see:

• Getting Started with SpamExperts
• How to use the SpamExperts spam filter

Spam Filters / Apache SpamAssassin (reseller, VPS and dedicated servers)

If your account is on a reseller, VPS, or dedicated server without the Professional Spam Filter, you will instead have the Spam Filters tool, which uses Apache SpamAssassin. It scores each incoming message against a long list of known spam characteristics and acts on any that score too highly.

1. Log in to cPanel and, in the Email section, click Spam Filters.
2. Turn on Process New Emails and Mark them as Spam. SpamAssassin then starts scoring your incoming mail.
3. Set your preferences:
   • Spam Threshold Score - how strict the filter is. The default is 5; a lower number is more aggressive (it catches more spam, with a slightly higher chance of catching genuine mail).
   • Spam Box - deliver suspected spam to a separate Spam folder instead of your inbox, so you can review it rather than lose it.
   • Spam Auto-Delete - automatically delete messages that score above a level you choose (for example 8). Use this with care: auto-deleted mail cannot be recovered.
4. To control individual senders, open Additional Configurations and edit the Whitelist (always allow) and Blacklist (always mark as spam).

BoxTrapper (optional, advanced)

BoxTrapper takes a stricter "challenge-response" approach: anyone who emails you and is not already on your whitelist must reply to an automatic verification message before their email is delivered. This blocks almost all automated spam, but it can also inconvenience genuine senders, so most people are well served by the Professional Spam Filter on its own.

1. In cPanel, open BoxTrapper - you can find it using the search box at the top of cPanel.

   

2. Find the email address you want to protect and click Manage.

   

3. Click Enable to turn BoxTrapper on for that address. You can then fine-tune it with:

   • Configure Settings - adjust how strict it is, and automatically whitelist people you email.
   • Edit Confirmation Messages - customise the verification email that unknown senders receive.
   • Edit White/Black/Ignore Lists - set senders who are always allowed, always blocked, or silently ignored.
   • Review Queue - release any genuine messages that are waiting for confirmation.

Reporting spam that slips through

If a spam message still reaches your inbox, you can report it so the filters learn from it - see Report spam.