Well, there seems to be a lot of discussion about uptime and CPU speed and disk space and PHP version and such, but I think a very important parameter is being overlooked in all these discussions: Security.

I am sick to death of spam-bots scouring my shared host's severs and gleaning email addresses. I've resorted to setting all my domains to "Delete all messages with a spam score greater than 0." Not to mention that once a year or so, all my domains get blacklisted due to spam floods being traced back to my server's IP address.

I host a lot of local political websites, all based on Drupal, and this is a serious concern. I'd like to offer my clients email using their domain name, but am now recommending that they just get a Gmail address to use for "Contact" and other functions.

Am I way off base here? Is there something simple I can do to prevent this avalanche of spam? I do not have shell access and am working with cPanel.

If I'm not alone in my concerns, I'd like to see some recommendations for more secure hosting.

My annual contract is up soon and I'm shopping for hosting. Please help!

Kevin

Comments

joe4’s picture

Without shell access it is almost entirely up to your host to prevent spam except client side filtering. There are some things you can do like disabling the catch all address if it exist.

I am using http://www.cartikahosting.com/ for 5 drupal sites and only had one SPAM incident that was fixed in 15 minutes.

You can host the website with a provider and use the free http://www.google.com/a/ to host the e-mail. They do a great job dealing with SPAM.

--------------------
Adoption Agency Reviews http://www.adoptionagencyratings.com

kjshaw’s picture

I suppose I should have pointed out that Drupal5 considers my security level a "Wet Paper Bag".

If other folks could check their Status Report at http://www.example.com/admin/logs/status and tell me what they see there, that would be useful.

Kevin

joe4’s picture

I get all green except the last one. Web server it says NOYB.

---------------------
Adoption Agency Reviews http://www.adoptionagencyratings.com

JohnForsythe’s picture

All green here. The status screen only tells you about the most basic stuff, though, so it doesn't mean a whole lot.

--
John Forsythe
Need reliable Drupal hosting?

jaku ayala’s picture

I'm no security expert, but since you mentioned gmail...

You can get gmail for your domain at www.google.com/a

The small business edition is free, with unlimited users.