Outbound Spam Protection is part of cPFence’s Spam AutoShield module. It automatically detects and blocks compromised or abusive email accounts that start sending spam, protecting your server’s IP reputation before major damage occurs. When triggered, it immediately blocks the sender and notifies administrators by email and Slack.
How It Works
- cPFence continuously monitors outbound email activity for patterns consistent with spam bursts or abuse.
- If detected, the offending account is automatically blocked from sending further emails.
- Admins receive instant email and Slack notifications detailing which account was blocked and why.
- Once the issue is resolved, you can remove the block using the WebUI or CLI.
Managing Outbound Spam Blocks (WebUI Method)
- Sign in to cPFence WebUI and select the server managing your mail service.
- Go to Tools & Utilities ➜ Spam AutoShield Tools ➜ Block / Unblock Outgoing Spam Email.
- Review any automatically blocked accounts. You can unblock accounts once verified clean.
- Outbound Spam Protection is enabled by default when the Spam AutoShield module is active. To disable this feature, set
SPAM_AUTOSHIELD_LIMITStooffin the config file or through the WebUI settings page.
Tip: You can fine-tune spam detection thresholds by adjusting MAX_SMTP_MSGS_PER_HOUR and MAX_WEB_MSGS_PER_HOUR (default: 200). Edit these values in /opt/cpfence/config.conf or through the WebUI ➜ Settings page.
Command Line (CLI) Method
- SSH into the server running cPFence. Enable Spam AutoShield Module if not active
cpfence --activate-spam-autoshield - Block a specific sender manually:
cpfence --add-spam-autoshield-out-email [email protected] - Remove the block after cleanup or verification:
cpfence --del-spam-autoshield-out-email [email protected]
Keep this module enabled for full protection. Only disable it temporarily if maintenance or testing requires it.
Compared to Enhance’s Default Behavior
- Enhance limiter: Temporary throttling, no permanent auto-block, no notifications.
- cPFence protection: Permanent block, real-time alerts, and fast recovery when you’re ready.
Need Further Assistance?
Visit our Knowledgebase or contact our support team for help.
