I'm at a complete loss on this one and the client is getting really upset about e-mails ending up in their spam account. It only seems to happen with messages from one specific domain, but it's an important one they need to be receiving e-mail from. The domain is even in SA's white list but the messages are still getting redirected to their spam account
Running WHM 11.28.86 the accounts are setup with SpamAssassin, box trapper was running but has been disabled since we initially thought it was somehow to blame. They have 8 filters setup to catch spam and redirect them to a gmail account used for collecting spam. The 6 of the 8 filters look for the words "acai" "viagra" "pfizer" in the subject or header and redirect to the spam address if found. The other two filters check the X-Spam-Status and X-Spam-Bar fields and also redirect to the spam address if found.
I've used the "Filter Test" on the account level filtering cpanel page (they have no user level filters configured, I double checked.) and the messages that are getting redirected come up as "Normal Delivery" showing that they don't match any of the filters. Yet for some reason when they initially come in they are getting redirected.
The only thing odd I see in the headers are two X-Spam-Status lines:
So bottom line is I can't find anything configured on this account that should be forwarding these messages to their spam account instead of normal delivery. But they keep ending up in the spam account instead of the users inbox.
Any help would be greatly appreciated as the client is getting very anxious. We even tried moving them from an older server, with an older version of WHM/Cpanel, to a new server with this version. In large part because they were using box trapper on some accounts and the old server had a bug that was putting /'s into the addresses in their boxtrapper white lists causing them not to be detected. But due to these issues they've disabled boxtrapper entirely in cause it was contributing to the problem.
Running WHM 11.28.86 the accounts are setup with SpamAssassin, box trapper was running but has been disabled since we initially thought it was somehow to blame. They have 8 filters setup to catch spam and redirect them to a gmail account used for collecting spam. The 6 of the 8 filters look for the words "acai" "viagra" "pfizer" in the subject or header and redirect to the spam address if found. The other two filters check the X-Spam-Status and X-Spam-Bar fields and also redirect to the spam address if found.
I've used the "Filter Test" on the account level filtering cpanel page (they have no user level filters configured, I double checked.) and the messages that are getting redirected come up as "Normal Delivery" showing that they don't match any of the filters. Yet for some reason when they initially come in they are getting redirected.
The only thing odd I see in the headers are two X-Spam-Status lines:
At the very top of the headers between two "Received:" headers and before the From: Sender: To: and Cc: headers. Then lower down where I expect to find them:
(Private information redacted in the content preview and our server name replaced with "OUR SERVER" for privacy)
So bottom line is I can't find anything configured on this account that should be forwarding these messages to their spam account instead of normal delivery. But they keep ending up in the spam account instead of the users inbox.
Any help would be greatly appreciated as the client is getting very anxious. We even tried moving them from an older server, with an older version of WHM/Cpanel, to a new server with this version. In large part because they were using box trapper on some accounts and the old server had a bug that was putting /'s into the addresses in their boxtrapper white lists causing them not to be detected. But due to these issues they've disabled boxtrapper entirely in cause it was contributing to the problem.
