BashEmailFOR CPANEL & WHM

A cPanel spam filter that protects inboxes and sending reputation.

Filter incoming spam and infected attachments, then contain outgoing abuse before a compromised account harms the whole server. BashEmail works on your existing cPanel server, with administration in WHM and private quarantine access for each customer.

No MX or DNS change Native WHM administration CloudLinux compatible
BashEmail filtering incoming spam and containing outgoing abuse on a shared cPanel mail server while clean messages reach separate customer mailboxes
INCOMING SPAM→FILTERED
INFECTED MAIL→HELD FOR REVIEW
OUTGOING ABUSE→CONTAINED
MAIL ROUTING→UNCHANGED
Email protection for shared hosting

Spam creates two different problems on a cPanel server.

Customers notice unwanted mail in their inboxes first. The more expensive problem often starts in the other direction, when a stolen mailbox password or compromised website begins sending abuse from an address associated with your server.

A useful cPanel spam filter has to handle both without turning every unusual message into a support ticket. BashEmail keeps incoming decisions visible, gives each customer access to their own quarantine and lets the hosting team contain a risky sender without disabling the rest of the account.

Incoming cPanel spam filtering

Give wanted mail a clear route to the inbox.

BashEmail applies the policy chosen for each domain or mailbox. Clean messages continue to delivery, while suspicious or infected mail follows the review path selected by the administrator.

INCOMING EMAIL Wanted mail and unwanted mail Existing mail route
BASHEMAILFilter · scan · apply policy Runs on the cPanel server
CPANEL DELIVERY Inbox, Junk or quarantine Outcome remains visible

Set strictness by domain or mailbox

One customer can choose stronger filtering without forcing the same cPanel spam filter settings on every account.

Hold infected messages safely

Malware and virus detections are kept for review instead of disappearing without an explanation.

Keep exceptions deliberate

Allow and deny lists handle trusted senders, known unwanted sources and requirements that apply to a particular customer.

Private cPanel quarantine

Let customers recover wanted mail without opening a ticket.

Each customer reaches their quarantine from the Email section of cPanel. They can only see messages for domains that belong to their own account, including addon domains and subdomains.

Release what should have arrived.Deliver an individual message, remove unwanted items or clear the quarantine when it is no longer needed.
Keep account boundaries intact.No customer can search, preview or manage mail belonging to another cPanel account.
Make retention understandable.A concise summary shows how much mail is held, how recent it is and when automatic deletion will occur.
cPanelEmail / BashEmail Quarantineexample.com
HELD FOR REVIEWCustomer quarantine
Private to this account
Search sender or subjectSearch
MESSAGEREASONDECISION
Updated service agreement[email protected]
ReviewRelease
Password expires today[email protected]
PhishingDelete
Unrequested promotion[email protected]
SpamDelete
Automatic retention activeSelect and delete · Empty all
OUTGOING PROTECTIONAccount response
Automatic actions expire
WatchUnusual sending becomes visible to the hosting team.
Observe
HoldQuestionable outgoing delivery pauses while the account is reviewed.
Contain
Suspend sendingOutgoing mail stops, while incoming mail and account services continue.
Protect
Mailbox login, incoming mail, websites and FTP remain available.
Outgoing spam protection for cPanel

Stop one compromised sender from becoming a server-wide reputation problem.

BashEmail watches outgoing activity and applies sending limits with exceptions for legitimate higher-volume customers. When behaviour becomes risky, the response can move from watch to hold and then to a sending-only suspension.

Respond without punishing the victim.The customer can still sign in, receive mail and use the rest of the hosting account while outgoing delivery is contained.
Avoid forgotten restrictions.Automatic watch, hold and suspension actions expire on their own instead of remaining applied indefinitely.
Protect the addresses that send mail.Reputation monitoring follows the server addresses used for outgoing delivery and provides a direct route to request removal when action is required.
Native cPanel and WHM workflow

Put each decision where the right person already works.

The hosting team manages server-wide protection in WHM. Customers handle their own held mail in cPanel, without another account, another portal or access to anyone else's messages.

  • One server-wide control point in WHM
  • Private quarantine access inside cPanel
  • Clear boundaries between hosting accounts
BashEmail inspecting cPanel email, delivering clean messages, diverting suspicious mail to quarantine and stopping a malicious message
WHMAdministrator

One server-wide control point

Review live mail traffic, delivery outcomes, busy senders, incoming sources, sign-in attack sources and searchable message events from WHM > Plugins.

  • Incoming and outgoing policies
  • Central quarantine and message search
  • Per-sender and per-domain exceptions
  • Sending reputation alerts
cPHosting customer

Private self-service inside cPanel

Customers manage mail held for their domains from the familiar Email area, reducing routine release and deletion requests for the support team.

  • Preview and release held messages
  • Delete one, selected or all messages
  • Account-scoped visibility
  • Clear retention summary
Installed through cPanel's supported plugin system Compatible with CloudLinux Designed to survive panel updates
On-server email security

Keep the mail route and customer relationship under your control.

Cloud filtering gateways require domains to route mail through another provider. BashEmail installs on the cPanel server instead, so existing MX records, DNS settings, mailboxes and delivery workflows stay in place.

No third party becomes the temporary custodian of customer messages. Filtering decisions and quarantine remain on infrastructure operated by the hosting company.

Explore the BashEmail platform
DECISIONBASHEMAILEXTERNAL GATEWAY
Mail routeRemains on your serverPasses through a provider
MX and DNSNo changeRouting change required
QuarantineStored on your serverStored outside the server
Customer accessInside cPanelSeparate service or portal
Operational safety

Review real mail behaviour before changing delivery.

BashEmail starts by observing. Your team sees the outcomes it would choose on your own server before incoming filtering or outgoing enforcement is enabled.

Mail keeps flowing

If filtering becomes unavailable, BashEmail fails open instead of deferring or bouncing customer mail.

Start with observation

Nothing is held until an administrator reviews the server's traffic and deliberately enables protection.

Respect the panel

Supported cPanel extension points avoid interfering with files and settings managed by the control panel.

Leave the server clean

Uninstall restores the panel's own filtering, releases held mail and preserves what BashEmail learned for a future reinstall.

BashEmail pricing

Straightforward pricing for the whole mail server.

Choose a plan by the number of hosting accounts on the server. Incoming filtering, outgoing abuse controls, malware scanning and quarantine are included in both.

Lite

Up to 10 hosting accounts

$12per month
Get BashEmail
  • Incoming spam and malware filtering
  • Outgoing abuse detection and control
  • Quarantine and end-user self-service
  • Per-domain and per-mailbox policies
  • Up to 10 hosting accounts
Unlimited accounts
Standard

Unlimited hosting accounts

$23per month
Get BashEmail
  • Everything in Lite
  • Unlimited hosting accounts
  • Unlimited hosted domains

Price per server, per month, excluding VAT. Cancel anytime. Talk to us.

cPanel spam filter questions

What hosting teams ask before enabling BashEmail.

What is BashEmail for cPanel?

BashEmail is an on-server cPanel spam filter for hosting companies. It filters incoming spam and malware, contains outgoing abuse, provides an administrator dashboard in WHM and gives customers private access to their own quarantine inside cPanel.

Does BashEmail require an MX or DNS change?

No. BashEmail installs on the existing cPanel server and works with the mail route already used by hosted domains. Customer mail does not need to pass through an external filtering gateway.

Can cPanel users manage their own quarantine?

Yes. Customers open BashEmail Quarantine from the Email section of cPanel. Access is restricted to domains belonging to their account, including addon domains and subdomains.

Can an administrator choose between quarantine and Junk delivery?

Yes. The administrator can hold caught mail in quarantine or deliver it to the recipient's Junk folder. Strictness can also be adjusted for an individual domain or mailbox.

What happens when a cPanel account starts sending spam?

BashEmail can move the sender through watch, hold and sending-only suspension. Incoming mail, mailbox access, websites, FTP and other account services remain available while outgoing delivery is contained.

Does an automatic sending restriction expire?

Yes. Automatic watch, hold and suspension actions expire on their own, so a temporary response is not left applied and forgotten.

Is BashEmail compatible with CloudLinux?

Yes. BashEmail for cPanel is compatible with CloudLinux and uses cPanel's supported plugin system for its WHM and customer interfaces.

Will a filtering problem stop customer mail?

No. BashEmail is designed to fail open. If filtering is unavailable, mail continues through the server rather than being deferred or bounced by BashEmail.

BASHEMAIL FOR CPANEL

Protect customer inboxes and the reputation behind them.

Add incoming and outgoing email protection without changing MX records or moving mail away from your server.