GICT knowledge base
Configure or Disable a cPanel Catch-All Address
Published
A catch-all is the destination for otherwise unrouted mail to nonexistent addresses on a domain. It is not the same as a normal mailbox, a rule forwarding one valid address, or the account used as a sender for system-generated mail. It can collect typos, but can also attract substantial spam and consume storage.
Choose whether a catch-all is needed
Prefer explicit valid addresses where practical. Before changing the current default, inspect who uses it, preserve useful existing messages and confirm the domain’s mail is hosted on this server. cPanel settings cannot redirect mail that external MX records send to another provider. Feature availability and permitted actions depend on your hosting account.
Set or change the domain’s default address
- Open cPanel > Email > Default Address over the verified HTTPS account interface.
- Select the precise domain under the unrouted-mail selector; do not assume it is the same domain selected in another page.
- To collect this mail, choose Forward to Email Address and enter an authorized destination. Review storage, privacy and loop risks before using an external address.
- To stop collecting invalid-recipient mail, choose the option that rejects it at SMTP time with an error message, if permitted. This is different from accepting mail and silently discarding it.
- Save with Change, reopen the domain’s settings and verify the selected action.
Advanced actions and disabling scope
Advanced options may include the system account, a program pipe or silent discard. A pipe executes application processing and needs a reviewed integration. Silent discard loses messages without informing the sender and should not be used as a missing-mail diagnostic. Domain forwarders can override the default-address behavior, so inspect existing routing rules too.
You do not need to change a server-wide WHM creation default merely to change an existing domain’s catch-all. WHM’s Initial default/catch-all forwarder destination concerns the initial destination used when accounts are created; it is not a bulk switch that necessarily rewrites every existing domain. Ask the administrator if the account-level control is unavailable rather than changing unrelated domains.
Test valid and invalid recipients separately
Use an authorized test sender and a deliberately nonexistent address that is not an existing alias or forwarder. Confirm the chosen collection or rejection behavior, then verify a known valid mailbox still receives mail. Inspect delivery results and destination spam/quota status. Changing the default does not remove old stored mail or make every valid-address routing rule disappear.
References: cPanel Default Address and WHM mail defaults.
Reviewed October 15, 2026. Documentation review only; no domain, catch-all, mailbox or server-wide setting was changed.
Related guides
Host Additional Domains on an Eligible InterServer Account
Check your hosting limits, choose a separate site or alias and use cPanel or DirectAdmin with deliberate DNS, content and certificate verification.
cPanelHardening Your cPanel Server: Beyond the Basics After CVE-2026-41940
Security is a moving target. With the recent discovery of CVE-2026-41940, it has become clear that just having a firewall isn't enough anymore.
cPanelcPanel and Plesk notice: Awstats,. Webalizer and Analog stats are being removed
Important Update: cPanel and Plesk Phasing Out Legacy Statistics Tools If you regularly check your website traffic through your hosting control panel, we have an...
cPanelThe dangers of shared licenses (in other words unofficial/cracked licenses)
Why Cracked cPanel Licenses Aren’t Worth the Risk: A Guide for InterServer Customers When you’re managing a server, every dollar counts.
