All Groupon emails going to Junk folder

twikamltd

Registered
Nov 15, 2011
2
0
51
cPanel Access Level
Root Administrator
Got a strange issue here, all emails from groupon are being delivered to Junk.

Spamassin has the address whitelisted, and even a User level filter in place to put it in the Inbox, but still they go to Junk, here's the log file entries on an example email:



From /var/log/exim_mainlog:

2011-11-14 03:08:22 H=mx19.group.fagms.net [62.27.57.19] Warning: Sender rate 0.0 / 1h
2011-11-14 03:08:23 1RPmuE-00050w-Nl H=mx19.group.fagms.net [62.27.57.19] Warning: "SpamAssassin as manchest detected message as NOT spam (-98.9)"
2011-11-14 03:08:23 1RPmuE-00050w-Nl <= [email protected] H=mx19.group.fagms.net [62.27.57.19] P=esmtp S=66796 [email protected]
2011-11-14 03:08:23 1RPmuE-00050w-Nl => xxx.xxx <[email protected]> R=virtual_user T=virtual_userdelivery
2011-11-14 03:08:23 1RPmuE-00050w-Nl Completed

From /var/log/maillog

Nov 14 03:08:22 server3 spamd[11001]: spamd: connection from IS-XXXXX [127.0.0.1] at port 43245
Nov 14 03:08:22 server3 spamd[11001]: spamd: setuid to manchest succeeded
Nov 14 03:08:22 server3 spamd[11001]: spamd: checking message <[email protected]> for manchest:512
Nov 14 03:08:23 server3 spamd[11001]: spamd: clean message (-98.9/15.0) for manchest:512 in 0.4 seconds, 65373 bytes.
Nov 14 03:08:23 server3 spamd[11001]: spamd: result: . -98 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DNSWL_NONE,SPF_PASS,USER_IN_WHITELIST scantime=0.4,size=65373,user=manchest,uid=512,required_score=15.0,rhost=IS-XXXXX,raddr=127.0.0.1,rport=43245,mid=<[email protected]>,autolearn=no,shortcircuit=no
Nov 14 03:08:23 server3 spamd[14776]: prefork: child states: II

Any ideas please guys?
 

cPanelTristan

Quality Assurance Analyst
Staff member
Oct 2, 2010
7,607
42
348
somewhere over the rainbow
cPanel Access Level
Root Administrator
It doesn't appear that the email is actually filtering. It isn't getting flagged by SpamAssassin as spam, but the filter that is setup isn't being parsed as it would appear in the exim_mainlog for the delivery portion. Please provide the exact filter being used that is supposed to put the email into the Inbox.
 

twikamltd

Registered
Nov 15, 2011
2
0
51
cPanel Access Level
Root Administrator
Here's the filter details:

/http://grab.by/bf7m

Here's the spam assasin config aswell:

/http://grab.by/bf7n

Most email seems fine, it's just these groupon mails..