Exim sending all email for user to /dev/null

[jsteel]

Be forewarned. Apparently the following filter that a user of ours had in place for over a year is now causing problems after a recent upgrade to 9.9.2-R7:

# Exim filter

if error_message then finish endif

if
$h_X-Spam-Status: contains "yes"
then
save "/dev/null" 660
endif


The result of this was sending *ALL* email to /dev/null for the domain. It's most likely a result of the SpamAssassin 3 upgrade.

[pizzaman]

I have this on one of my customers as well,
even on cPanel 9.9.8-C44. To fix it, I need to go to cPanel > Mail > Mail Filter
and delete that rule.

[Marty]

Change the filter from "contains" to "starts with" or "begins with" and it should work as expected.