iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Shared hosting does not come with one universal email spam-protection package. If your host provides cPanel, you may have Spam Filters powered by Apache SpamAssassin, but the host decides which controls are available and may enforce filtering server-wide. Use Spam Filters to manage suspected incoming spam; use Email Deliverability to check authentication for mail sent from your domain. These solve different problems.
What spam protection may be included
In cPanel, the Email → Spam Filters interface can let you configure SpamAssassin, adjust the score threshold that classifies a message as spam, route flagged messages to Spam Box, and manage allow and block lists. A hosting provider can hide or disable some controls through server-level settings. It can also require SpamAssassin to run globally, leaving you unable to switch it off from your account.
Check your own cPanel account and plan documentation rather than assuming these features are included. If Spam Filters is missing or an option is unavailable, ask your provider whether it is disabled, enforced, or replaced by another mail-filtering service. These directions apply to cPanel; another control panel may use different features and menus.
Free tools Windows power users keep installed
One-click scans. No signup required.
How to enable and tune incoming spam filtering
- Open Spam Filters. Sign in to cPanel and select Email → Spam Filters. If the item is absent, contact your host to confirm whether it exposes the feature for your account.
- Enable filtering if account-level control is available. Select Process New Emails and Mark them as Spam. If the host forces filtering on globally, you may not be able to change this setting.
- Choose a threshold carefully. SpamAssassin assigns messages scores; the configured threshold determines which messages are treated as spam. A lower threshold is more aggressive and may flag legitimate mail. cPanel & WHM Documentation warns: “A lower spam threshold score, such as a one, is aggressive and labels many messages as spam, including messages that may not be spam.” Start conservatively, then monitor results and adjust based on messages that are incorrectly flagged or missed.
- Choose what happens to flagged messages. If available, enable Spam Box to keep suspected spam in a separate folder for review instead of losing it immediately. Review and clear that folder periodically: its messages use the mailbox’s storage quota. If Spam Box is not offered, ask your host about alternatives such as global or per-account email filters.
- Use allow and block lists selectively. If the interface exposes these lists, use them to manage messages from particular senders. They do not replace threshold tuning or a check of how your host handles flagged mail.
Check authentication for email you send
Incoming content filtering is not the same as sender authentication. SpamAssassin and Spam Box classify and handle incoming messages. SPF and DKIM help receiving systems evaluate whether mail sent using your domain is authorized and signed; DMARC publishes a policy that relies on SPF and DKIM results and alignment with the visible From domain. These records can help with trust and deliverability, but they do not guarantee inbox placement or prevent all spam.
#1 Best Overall
- Inspect SPF and DKIM. In cPanel, open Email → Email Deliverability and check the status for your domain. Use suggested records only if they match the service that actually sends your mail. If you send through a third-party mail provider, its required SPF or DKIM values may differ.
- Confirm DNS authority before editing records. Publish or change records at the authoritative nameservers for your domain. The cPanel account, DNS provider, and email-sending service may be controlled by different organizations; make sure you are editing the DNS zone that recipients actually query.
- Add or review DMARC after SPF and DKIM are valid. cPanel states that DMARC requires valid SPF and DKIM. Set up the underlying authentication first, then publish the DMARC record through the authoritative DNS provider.
- Ask who controls the sending IP if PTR is incorrect. PTR, or reverse DNS, maps a sending IP address to a hostname. On shared hosting, the host or IP owner commonly controls this record, so correcting it may require a support request rather than a change in your cPanel account.
Choose settings based on the problem you are solving
| Choice or control | What it affects | Main trade-off or owner |
|---|---|---|
| Lower SpamAssassin threshold | Incoming message classification | More aggressive; increases the chance of legitimate mail being marked as spam. |
| Higher SpamAssassin threshold | Incoming message classification | More passive; fewer messages may be classified as spam. |
| Spam Box | Handling of flagged incoming mail | Keeps messages available for review, but they consume mailbox quota. |
| SPF and DKIM | Evaluation of mail sent using your domain | Records must match the services authorized to send or sign that mail; DNS changes belong at the authoritative nameserver. |
| DMARC | Policy and alignment checks based on SPF and DKIM | Requires valid SPF and DKIM; publish it in the authoritative DNS zone. |
| PTR / reverse DNS | Hostname identity associated with the sending IP | Usually controlled by the host or IP owner, not the shared-hosting account holder. |
If you are troubleshooting messages landing in spam, also consider sending reputation, sending frequency, and message content. Authentication records are one part of how receiving systems evaluate mail, not a substitute for content filtering or a promise that messages will reach inboxes.
Quick Recap
Best Value
- XGS 88W with 1 Year Xstream Protection - Next-generation firewall appliance with Xstream Protection subscription providing zero-day defense, cloud sandboxing, email filtering, intrusion prevention, and advanced reporting, managed through Sophos Central for unified policies and reporting.
- Built in Wi Fi 6 with 4 x 2.5 GE copper ports, delivering up to 9.9 Gbps firewall performance for secure wired and wireless networks.
- Zero day protection with cloud sandboxing, email filtering, and advanced reporting for full enterprise coverage.
- TLS inspection and next generation intrusion prevention block hidden threats in encrypted traffic and stop sophisticated attacks.
- Includes Xstream Protection – Advanced security bundle with zero-day protection, cloud sandboxing, email filtering, and automated threat response, providing full coverage against the most sophisticated cyberattacks.
Rank #4
- XGS 108 with 1 Year Xstream Protection - Next-generation firewall appliance with Xstream Protection subscription providing zero-day defense, cloud sandboxing, email filtering, intrusion prevention, and advanced reporting, managed through Sophos Central for unified policies and reporting.
- 6 x 2.5 GE copper ports and 1 SFP fiber port, supporting up to 12.5 Gbps firewall performance for growing business networks.
- Zero day protection with cloud sandboxing, email filtering, and advanced reporting for full enterprise coverage.
- TLS inspection and next generation intrusion prevention block hidden threats in encrypted traffic and stop sophisticated attacks.
- Includes Xstream Protection – Advanced security bundle with zero-day protection, cloud sandboxing, email filtering, and automated threat response, providing full coverage against the most sophisticated cyberattacks.
Rank #3
- Pass the Securing Email with Email Security Appliance with updated flashcards packed with detailed content aligned to the latest exam blueprint. Cover all core topics without the overload found in lengthy study guides. Get 300+ Securing Email with Email Security Appliance flashcards on 8-1/2″ x 11″ perforated card stock.
Rank #2
- Pass the Securing Email with Email Security Appliance 300-720 SESA with updated flashcards packed with detailed content aligned to the latest exam blueprint. Cover all core topics without the overload found in lengthy study guides. Get 300+ Securing Email with Email Security Appliance 300-720 SESA flashcards on 8-1/2″ x 11″ perforated card stock.
Who to contact when a setting is missing or fails
- Spam Filters or Spam Box is absent: Ask the hosting provider whether the feature is exposed for your plan or whether another filter is in use.
- You cannot turn filtering off: The host may have enabled SpamAssassin globally.
- SPF, DKIM, or DMARC changes do not appear to take effect: Confirm which service sends your mail and which provider controls the authoritative DNS zone before changing records.
- PTR needs correction: Contact the host or owner of the sending IP.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
