Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is box trapper bad for web hosting on shared servers? Reason I ask is no one uses it because of the CSF message

Having boxtrapper enabled can very easily lead to your server being listed in common RBLs and usually has the effect of increasing the overall spam load, not reducing it. You should disable it in WHM > Tweak Settings > BoxTrapper Spam Trap

Is this anything to worry about? What causes BoxTrapper to be bad?

share|improve this question

closed as primarily opinion-based by Falcon Momot, Ward, Jenny D, mdpc, EEAA Jul 2 '13 at 3:39

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise.If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 0 down vote accepted

I disagree with both responses provided at this point because there are ways within BoxTrapper to mitigate backscatter SPAM. Note, that the SPAM referenced here are the "Challenge" notifications sent by Box Trapper to authorize the release of pending e-mails.

I don't know of any major cPanel hosting company that enables Box Trapper by default. It's considered more of a power user tool. That said, I have been using BT for almost 10 years and I love it. I'll admit the software was a bit of a resource hog back in 2004 - 2007 but it has been optimized somewhat and servers have become much more powerful in that time frame. Today, it should not be an issue for any but the crappiest servers or the most inexperienced admins.

While BT can challenge every e-mail, the default is to always allow e-mail from individuals who have been successfully challenged previously. Besides white listing, the software makes it super easy to utilize Ignore Lists and Black Lists (neither of which will result in any further communication from your server).

Anyone who has the technical ability to read the full headers of an e-mail can discern where mail is really coming from and block not only individuals but entire domains - i.e.,

BT, used in conjunction with Spam Assassin, offers an effect method to greatly reduce SPAM at the point of entry (your server). IMO this is a better approach than using filter management within an e-mail client to deal with SPAM.

As for BT being a rude technology, I can only say that is a personal opinion. It has not been an issue for my business clients or friends as they are automatically white listed by the software after the initial challenge. Unless your clients or friends are changing their e-mails on a weekly basis I don't see how this can be an aggravating or complex issue for reasonable and intelligent people.

share|improve this answer

Boxtrapper will automatically create messages that are not wanted by the receiver, even if they are sent in reply to a message they sent theirself. But since spam is often using faked FROM addresses, it' very likely to create backscatter spam, which can land you on an RBL real quickly.

On a personal note, I consider something like Boxtrapper to be very rude and would very likely choose to discontinue the communication with someone using it.

In short: Don't do it. It's not helping fighting spam, it can get you blocked and it is rude.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.