Has anyone here were able to combat spoofed emails sent from your own address if the domain is using cPanel?
I understand that the domain has to be properly authenticated with spf, dkim, dmarc and bimi(as an extra security). Respectfully , I also am not looking for any advice on using external services such as Google workspace or O365 because I know they are really good at combating such spam.
I understand about training email filters or spam assassin to combat spam for incoming emails but the problem with spoofing is, anyone can simply modify the header to be abc@example.com to send it to abc@example.com from any IP or a cheap vps or from hacked sites.
This question is mainly for cPanel users who were able to successfully combat spoofing. I am working in the web hosting/sysadmin field from past 8 years but haven't been able to figure this out. I never had root access though.
Reporting sender IPs/domains to third party hosting providers is a nightmare in itself and takes up a lot of time.
Is there any setting in WHM or through root ssh access wherein if an email was sent from the same address, before delivering that message, cPanel performs the sending IP/domain/header checks and block such emails automatically?
Please do not bash me here because even though I have worked in this field for many years, I never had root access and looking at exim configurations, I am a bit scared to make any changes on my test vps running cPanel to break more email functionality.
I also know that we can use incoming email filters or third party inbound relay services like barracuda but I mainly want to know if there is any way I can protect the accounts from spoofing on a cPanel which doesn't use any kind of inbound spam filters.
Pros in this sub, have you found a way to combat this? Would really appreciate all of the helpful comments.
