Global Email Filters - equals vs contains

[alfa ex]

Hi.

I'm doing a lot of tests on my cpanel with global email filters and i'm not getting the result that i want.

I have a lot of emails that don't exists anymore (old employees) but they keep receiving spam, and i have a catch all box, so this box receives about 20,000 emails per week.

I want to completely drop e-mails for user [email protected] but only if it is the unique recipient.
If there are more recipients like [email protected], [email protected], [email protected] i want to drop the e-mail for [email protected] only and the other two receive normal.

But when i set up this rule.
TO EQUALS [email protected] => discard message AND stop processing rules
The e-mail is delivered in the box with no problem
If i use contains, it will drop the message for all the recipients

I have a bunch of filters already set up and they work fine, but it's with regex and subject using CONTAINS.

I don't know if it's a bug or if is the way that this feature works.

My WHM version is 54.0 (build 17)

thanks in advanced.

 

[cPanelMichael]

TO EQUALS [email protected] => discard message AND stop processing rules

Hello

Could you post a screenshot of this filter rule? Have you reviewed /var/log/exim_mainlog for emails sent to this address to see how Exim is handling it? EX:

exigrep [email protected] /var/log/exim_mainlog

Thank you.

 

[alfa ex]

hi.
thanks for the reply

SS


log

2016-03-09 15:31:58 1aditi-0006MK-Ul H=blu004-omc2s27.hotmail.com [65.55.111.102]:53971 Warning: "SpamAssassin as istsiste detected message as NOT spam (3.3)"
2016-03-09 15:31:58 1aditi-0006MK-Ul <= [email protected] H=blu004-omc2s27.hotmail.com [65.55.111.102]:53971 P=esmtps X=TLSv1.2:ECDHE-RSA-AES256-SHA384:256 CV=no S=3080 [email protected] T="test2" for [email protected]
2016-03-09 15:31:58 1aditi-0006MK-Ul => mateus ([email protected]) <[email protected]> R=virtual_user T=virtual_userdelivery
2016-03-09 15:31:58 1aditi-0006MK-Ul Completed

 

[cPanelMichael]

Could you remove the "Stop Processing Rules" action and verify if the issue persists with just the "Discard" action? It's also possible the other global filter rules you have in-place are overriding this specific filter. Do any of the other filter rules have the "Stop Processing Rules" action defined?

Thank you.

 

[alfa ex]

Could you remove the "Stop Processing Rules" action and verify if the issue persists with just the "Discard" action?

Yes, i did and the behavior is the same.

It's also possible the other global filter rules you have in-place are overriding this specific filter

dropa is the first rule.
I used "Stop Processing Rules" from past experiences.
If i don't use this it will pass through all rules.
I don't think there are conflict, i'm very carefull with these rules.
But if you want i can search for something.

Do any of the other filter rules have the "Stop Processing Rules" action defined?

Yes the others rules has "Stop Processing Rules" and they work fine.

Example:
rule 4:
subject matches regex viagra -> deliver to folder A, stop processing
rule 5:
any header matches regex XXX.XXX.XXX.XXX -> deliver to folder B, stop processing

without Stop Processing Rules a good amount of e-mail were duplicated on folder A and B

 

[cPanelMichael]

Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thank you.

 

[alfa ex]

Hi.
The ticket number is 7509795

But i'm having trouble granting access on the server.
on the ticket i'm typing a user that i login using ssh and that have sudo permission.
but on my whm i always get an error when clicking on the grant button.

error = specify an unsupported root escalation method, using_sudo, for user “mysshuser”.

i always log on the server with this "mysshuser" and i have sudo permission, i can even do "sudo su - root" with this "mysshuser" user