1. The first thing you need to do is remove Catch All Email for your domain. Please create proper email accounts and forwarders instead of using the catch-all default address and set the Default Address to ":fail:" (without quotes). You can do this in your control panel.

Otherwise, you will receive a very large number of spam, worms, and virus email and are open for dictionary attacks on your domain. What is a dictionary attack? Spammers send millions of emails to your domain by generating random usernames@yourdomain.com. By setting up catchall you are opening the door to the attack. Catchall is a bad idea these days. You should create email accounts or email forwarders (aliases) only for the required addresses.

2. Activate SpamAssassin in your control panel. Also if you activate SpamBox, regularly check it and clear it.

3. You will need to customize SpamAssassin for your usage and this will be an ongoing struggle.

Please visit http://spamassassin.apache.org and learn how you can tweak SpamAssassin configuration files.

Add to Favourites

Print this Article