Receiving tons of spamming emails every day

ImperialTrader

• February 19, 2020 19:22

Every day I receive tons of spamming emails. It doesn't reach my inbox because some times, the sender IP is on the blacklists and other times, they are sending to a not existing email address. But I receive more than 1000 spamming emails in 1 second only, is it could make a load on my server and could lead my server to fall down?

• 

  keat63

  • February 20, 2020 07:09

  Welcome to my world. If your'e lucky, then you might find a pattern in the sending IP's maybe a subnet or a few subnets, which you could then firewall. If you could narrow these down to a specific country, then you could block that whole country in CSF firewall for a period until it subsides. Do you have any custom RBL's configured in exim config. ? I use the ones as per my image, whilst they are not fool proof, they do work well together. I guess adding a few extra RBL's might help.

  0
• 

  ImperialTrader

  • February 20, 2020 15:59

  Welcome to my world. If your'e lucky, then you might find a pattern in the sending IP's maybe a subnet or a few subnets, which you could then firewall. If you could narrow these down to a specific country, then you could block that whole country in CSF firewall for a period until it subsides. Do you have any custom RBL's configured in exim config. ? I use the ones as per my image, whilst they are not fool proof, they do work well together. I guess adding a few extra RBL's might help.

  
  Ok, fine. What if I didn't block them? Is that harmful to my server?

  0
• 

  keat63

  • February 20, 2020 18:13

  Thats a good question, and one which I can't personally answer. However, I know how annoying these can be and I'd be putting all sorts of obsticles in thier way to stop or slow them down.

  0
• 

  ImperialTrader

  • February 20, 2020 18:24

  Thats a good question, and one which I can't personally answer. However, I know how annoying these can be and I'd be putting all sorts of obsticles in thier way to stop or slow them down.

  
  thank you :)

  0
• 

  cPanelLauren

  • February 21, 2020 01:54

  Excessive inbound email can cause some load, exim has to process the message, if you use SpamAsassin it'd have to scan the email, dovecot would have to process delivery. Each mail delivery can have 1000's of actions that need to be run though usually extremely fast and short lived.

  0
• 

  Matt.R

  • February 21, 2020 08:11

  We've started to use the option in cPanel to "Filter Incoming Emails by Domain" (located in Email section). Did this because many emails were coming from domains like .best icu etc. We know for a fact that none of our genuine emails would come from such doamins so we simply blocked them. This actually works really well. This could also be used in conjunction with the "Filter Incoming Emails by Country" btw.

  0

Please sign in to leave a comment.