English
Magyar
Imagine you’ve been waiting for days for a crucial contract worth 14,000 euros, but the message ends up in your spam folder, whilst dozens of suspicious phishing attempts flash up amongst your incoming emails. Unfortunately, this scenario is not uncommon, as cybercriminals’ methods will have become more sophisticated than ever by 2026. We agree that nothing is more frustrating than when important client emails get lost in the digital noise, whilst your inbox is flooded with aggressive adverts. Setting up precise spam filtering is no longer just an optional convenience feature, but a fundamental pillar of professional business communication and corporate security.
This guide will show you exactly how to configure your systems professionally so that your inbox finally remains free from distractions and dangerous phishing attempts. We’ll help you understand the logic behind modern, score-based filtering and show you how to set up automated protection that doesn’t require you to make manual adjustments every day. We’ll walk you through the technical steps and best practices that will ensure only truly relevant content reaches your inbox, whilst also taking the protection of your infrastructure to the next level.
Why is it essential to set up professional spam filtering in 2026?
By 2026, spam will account for more than 45 per cent of global email traffic. This enormous volume not only clogs up inboxes but also poses a serious cyber security risk. Email remains the primary channel for modern phishing attempts and the spread of ransomware. Cybercriminals now use generative AI tools to compose deceptive messages, making manual defence virtually impossible. Configuring spam filters is therefore the first and most important line of defence for every vigilant user and business.
aWh’s more than 10 years of experience confirms that a single software solution is not enough for effective protection. We use multi-layered protection, which starts at server level by blocking suspicious IP addresses and extends all the way to a unique set of rules for each user account. If you neglect these settings, your business opportunities may suffer. A poorly configured filter that sends a quote worth several thousand euros or a critical email from a partner straight to the spam folder could result in significant financial losses.
The basics of spam filtering: What do you need to know?
The cornerstone of effective protection is the judicious use of blacklists and whitelists. A blacklist blocks already identified malicious senders, whilst a whitelist ensures that emails from your important partners reach their destination under all circumstances. The system assigns a ‘Spam Score’ to every incoming message. This is a value between 0 and 10; the higher the number, the more likely the message is to be spam. By using modern anti-spam techniques, the occurrence of false positives can be minimised. This is the error where the filter mistakenly flags a genuine, important email as spam and blocks it; according to data from 2025, this can affect up to 3 per cent of messages when using non-professional filters.
The security of corporate email and brand reputation
The foundation of professional business communication is reliability and integrity. If your company’s server is not configured correctly and accidentally sends out spam, your domain name could be blacklisted in a matter of moments. This will result in Gmail or Outlook automatically rejecting even your legitimate business emails. It can take months to restore your reputation, and in the meantime, you can expect a significant loss of revenue. Maintaining a clean communication channel is just as important as having a stable hardware infrastructure. If you’re only just getting to grips with the technical basics, it’s worth reading up on what hosting is, so that you can fully understand the relationship between the server and email. Setting up spam filtering isn’t just a convenience feature; it’s a tool for protecting your brand.
Step-by-step guide to configuring SpamAssassin via the cPanel interface
Setting up effective spam filtering is an essential step in maintaining the security of your business email. To begin with, log in to your cPanel using the details provided by your service provider. Locate the ‘Email’ section, then click on the ‘Spam Filters’ icon. Here you’ll find the SpamAssassin engine, which remains one of the most reliable tools for identifying spam in 2026.
To activate this feature, tick the “Process New Emails and Mark them as Spam” option. The system will then begin to score every incoming email. You can choose between two main strategies for handling filtered emails. Auto-Delete permanently removes suspicious messages, whilst moving them to a separate folder (Spam Box) allows you to check them later. We recommend using the Spam Box, as this prevents important business enquiries from being accidentally lost.
Fine-tuning the threshold determines the filter’s sensitivity. By default, this value is set to 5. If too much spam gets past the filter, reduce this number; if, on the other hand, too many legitimate emails end up in the spam folder, increase the value. In our experience, a setting between 4.0 and 5.0 provides the best balance for the small business sector in Hungary.
Configuring the SpamAssassin scoring system
The rating scale ranges from 1 to 10. A setting of 1 represents extremely strict protection, which blocks almost all newsletters, whilst a setting of 10 filters out only the most obvious scams. It is worth starting with a setting of 5, then fine-tuning the settings after two weeks based on your experience. A well-configured spam filter can operate with an accuracy of over 98 per cent.
You can check the effectiveness of your settings in the email headers. Look for the lines ‘X-Spam-Status’ or ‘X-Spam-Score’. If an email has been given a score of 4.8 but has still got through, and you think it’s spam, it’s worth setting the global threshold to 4.5. This kind of data-driven approach guarantees a clean inbox.
Managing whitelists and blacklists in cPanel
Using static lists helps to ‘train’ the filter. The whitelist ensures that emails from important partners never get caught in the filter. In contrast, the blacklist allows you to permanently block domains or specific addresses from which you regularly receive unsolicited messages. For more effective filtering, use wildcard characters: with the format *@domain.hu, you can authorise all employees of a particular company.
- Whitelist: Adding trusted clients and newsletters using the ‘Whitelist From’ option.
- Blacklist: Blocking known spammers in the ‘Blacklist From’ field.
- Automation: Use the asterisk (*) character to manage entire domains.
If you’re looking for a professional environment, it’s worth reading our summary of our cPanel hosting services, where we use state-of-the-art filtering technologies. Regular maintenance and monthly updates to the lists help ensure your email service remains uninterrupted right through to 2026.
If you’re looking for a secure and fast solution, choose our business email service, where spam filtering is included as standard.
Authentication and security: The role of SPF, DKIM and DMARC records
Setting up effective spam filtering doesn’t stop at filtering incoming emails. Many people make the mistake of focusing solely on protecting their own email inbox, whilst neglecting the credibility of their own domain. If your outgoing emails lack proper authentication, the recipients’ servers are highly likely to classify them as spam. This damages your domain’s reputation and hinders business communication.
The SPF (Sender Policy Framework) record is the first line of defence. It is a list in the DNS zone that tells the world exactly which servers and IP addresses are authorised to send emails on your behalf. If a fraudster tries to send an email from a third-party server whilst spoofing your address, the recipient will see that the IP address in question is not on the authorised list.
DKIM (DomainKeys Identified Mail) goes one step further. It places a digital signature in the header of every email sent. This cryptographic seal certifies that the content of the email and the sender’s details have not been altered between sending and receipt. This integrity certification is of fundamental importance for modern email systems.
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is the ultimate set of rules. It tells the receiving server what to do if the SPF or DKIM checks fail. You can configure it to allow faulty emails through, place them in quarantine, or reject them entirely. DMARC reports also give you an accurate picture of whether anyone is misusing your domain name.
Configuring DNS records via the aWh control panel
The aWh cPanel hosting interface makes these technical steps extremely straightforward. Under the ‘Email Deliverability’ menu item, the system automatically suggests an SPF record, which you can activate with a single click. There’s no need to manually copy and paste IP addresses; the software does the legwork for you.
The generation of DKIM keys is also automated. Once activated, cPanel creates the necessary public key in the DNS zone. If you require custom settings, you can check or modify the records at any time using the ‘Zone Editor’ tool. Here you can view the TXT-type records responsible for authentication.
Why will these settings be mandatory in 2026?
From February 2024, Google and Yahoo drastically tightened their terms and conditions. By 2026, these requirements had been extended to cover all market participants. Today, triple authentication is mandatory not only for mass email senders but also for small businesses that send just a few emails a day. Without it, there is a more than 90 per cent chance that your emails will end up in the spam folder of Gmail or Outlook accounts.
- SPF prevents direct domain spoofing.
- DKIM ensures that nobody has tampered with your email whilst it was in transit.
- DMARC puts you in control of emails with invalid authentication.
When setting up spam filtering, your own credibility is therefore key. If these records are in order, your emails will reach their destination safely, and you’ll also protect your domain’s reputation from being blacklisted.
Why do emails still end up in the junk folder? Troubleshooting
Even with the most careful spam filtering settings in place, outgoing emails may still end up in recipients’ spam folders. This is often not the fault of the filtering system, but rather the result of inaccuracies in content or technical details. Modern spam filters make decisions based on scoring algorithms. If a message contains too many suspicious elements, such as aggressive marketing terms (e.g. ‘free’, ‘prize’, ‘instant cash’) or too many external links, the score will quickly exceed the critical threshold.
The reputation of an IP address is a key factor in deliverability. If you send an email from a shared server where another user has previously sent bulk spam, the server’s IP address may be blacklisted (RBL). In this case, the receiving servers will automatically block the request, regardless of the email’s content. Before sending, it is worth testing the ‘spam factor’ of your emails using tools such as Mail-Tester or GlockApps. These programs analyse the message on a scale of 0 to 10, highlighting any technical or content-related shortcomings.
Formatting can also be a stumbling block. Incorrect HTML code, unclosed tags or an excessively low text-to-image ratio raise suspicion in the filters. If an email consists almost entirely of images, the system assumes that the sender is attempting to circumvent text-based filtering. Aim to maintain a ratio of at least 60 per cent text to 40 per cent images in every message you send.
Common technical errors during setup
Inaccuracies in the technical setup are one of the most common causes of delivery problems. Incorrectly configured MX records can result in reply messages failing to arrive, or the receiving server being unable to authenticate the sender. A common mistake is the use of multiple SPF records for a single domain. According to the valid standard, there can only be a single SPF record; if there are several, filters will deem the authentication invalid. When making DNS changes, also pay attention to the TTL (Time To Live) value, as it can take up to 24 hours for the changes to propagate globally.
Managing feedback from recipients
If a customer reports that they have not received a message, your first step should be to check the server-side error logs. If your IP address has been blacklisted, you can request removal from the operator of the relevant list (such as Spamhaus or Barracuda), but you must first resolve the issue that caused the block. A properly configured environment is the foundation of secure and reliable email. If you’d like to find out more about the technical basics, read our post ‘The Complete Guide to Web Hosting’.
Would you like to avoid technical difficulties and ensure your emails reach their destination? Take a look at our professional email solutions for maximum security!
Secure email on aWh hosting: Automated protection
By 2026, secure business communication will no longer rely on a simple password alone. aWh’s infrastructure provides a multi-layered shield around your email. Server-level protection is an integral part of all our hosting plans, which means that a significant proportion of malicious traffic is blocked by our filters before it even reaches your account. Automated DDoS protection and intelligent traffic filtering analyse the patterns of incoming data packets in real time. If our system detects a massive, malicious attack from a suspicious IP address, it immediately blocks access at the edge of our network.
Configuring spam filtering doesn’t end with automation. Whilst our machine learning-based algorithms are extremely effective, our expert product support helps with fine-tuning to meet your specific business needs. If you require custom whitelists or stricter filtering rules, our engineers will provide direct assistance. Choosing dedicated email hosting offers a strategic advantage over traditional, shared solutions. In this environment, you need not worry about the server’s IP address being blacklisted due to the irresponsible behaviour of another user. A clean reputation ensures that your outgoing emails do not end up in your partners’ promotions or spam folders.
The benefits of aWh’s email solutions
Speed comes as standard with us. Our NVMe-based storage ensures that you can find any old attachment or message in a matter of seconds, even in mailboxes containing tens of gigabytes of data. The essence of redundant infrastructure is that data is stored in parallel across multiple physical units, so even in the event of a hardware failure, there is no service interruption or data loss. We have designed the control panel so that configuring spam filtering and managing accounts is straightforward even for beginners, whilst professionals can control every technical parameter.
Start secure emailing today!
Don’t wait for a serious data security incident to happen before making the switch. Choose the plan that best suits your needs from aWh’s range of email hosting services. As part of our free migration service, our experts will fully transfer your emails from your old provider, including all folders and previous messages. Our more than 10 years’ experience guarantees that your email will operate in a stable and secure environment. Join our thousands of satisfied customers and enjoy seamless digital communication across all your devices.
Secure your business communications today
By 2026, effective protection will no longer be merely an optional extra, but the cornerstone of stable and professional business communication. The precise configuration of authentication protocols such as SPF, DKIM and DMARC is essential for ensuring emails reach their intended recipients successfully. Setting up precise spam filtering via the cPanel interface and fine-tuning SpamAssassin scores drastically reduces the number of unwanted messages received. These technical measures protect your mailbox from unnecessary overload and critical security risks.
With over 10 years’ professional experience, aWh provides the stable technological infrastructure required for this process. Our modern servers offer 99.9 per cent guaranteed uptime, ensuring that your customers’ emails remain accessible at all times. Should you have any queries during the configuration process, our expert support team will provide immediate and prompt assistance in resolving them. Don’t waste your valuable time manually deleting spam; switch to an environment where automated protection works for you.
Forget about spam – choose professional aWh email hosting!
Set up a reliable and secure digital email system today.
Frequently Asked Questions
How can I completely disable spam filtering?
You can completely disable spam filtering in the cPanel interface by deactivating the main switch under the ‘Spam Filters’ menu item. However, this is not recommended, as statistics show that up to 95 per cent of incoming traffic may be spam, which would then go straight into your primary inbox. Accounts left unprotected are much more vulnerable to phishing attempts and malware.
What is the difference between Spam Filters and Email Filters in cPanel?
Spam Filters use a global algorithm to score emails, whilst Email Filters allow users to set their own custom rules. With the latter, you can specify what should happen to a message based on a specific sender or subject line. When setting up effective spam filtering, it is worth combining both approaches to ensure maximum accuracy, so that the system and your individual requirements work together.
How long does it take for SPF and DKIM settings to take effect?
After modifying the SPF and DKIM records, the changes usually take between 2 and 24 hours to propagate across the global DNS network. Although the server sees the new data immediately, remote mail systems need time to update their caches. It is advisable to check the status using an external validation tool 12 hours after configuration to ensure everything is working correctly.
Why am I still receiving spam even though I’ve set up the filter?
Filters do not block every email if the threshold is set too high, or if the sender keeps changing their tactics. If you’re still receiving a lot of spam even with the default score of 5, set the filter to a stricter value, such as 4 or 3. Machine learning-based systems need time to adapt to the latest trends for 2026 and new types of threats.
Does spam filtering affect the speed at which emails arrive?
The filtering process adds a negligible amount of time to delivery times, generally between just 0.1 and 1.5 seconds. This technical check is necessary for the system to analyse the header and content in accordance with security protocols. With our modern NVMe-based servers, this delay remains virtually imperceptible to the user during day-to-day email use.
How can I set up custom filtering rules for specific words?
You can create custom rules in the ‘Global Email Filters’ section of cPanel, where you can assign keywords to the ‘Body’ or ‘Subject’ fields. For example, if you wish to filter out emails containing the word ‘prize’, set the ‘contains’ condition and select the ‘delete’ action. This method removes messages containing the specified phrases with 100 per cent efficiency, before they even reach your inbox.
What does the ‘Spam Box’ option in the settings mean?
By enabling the Spam Box option, the system does not permanently delete suspicious emails, but moves them to a separate folder instead of automatically deleting them. This helps prevent the loss of valuable messages should the filter accidentally flag a legitimate email as spam. We recommend that you check this folder at least once a week before the system automatically clears its contents after 30 days.
Do I need a separate antivirus program for my email if I have a spam filter?
Yes, server-side virus protection is recommended alongside spam filtering, as the two technologies provide protection against different types of threats. Whilst spam filtering is configured to identify unsolicited advertising and phishing attempts, antivirus software scans for malicious code hidden in attached files. aWh’s systems employ multiple lines of defence, so both functions actively protect your business data.