SOLVED Global Email Filters not applying first time

tmurdock

Member
Jul 6, 2015
21
0
51
United States
cPanel Access Level
Root Administrator
Hoping someone else has seen this happen. I have set several global email filters to match certain strings in the body of an email related to some unrelentless spammers that keep changing domains and hosts but have a certain phrase that is contained in every email.

The odd thing is the global filter will not catch the email upon delivery from the spam email server (which is always different), but when a user forwards the email to me, the spam filter works and will move the email to the correct folder.

I have tried creating the filters in cPanel's Global Email Filter as well as recreating them in the exim sysfilter folder but the result is the same no matter what. Spamassassin does scan the email but it doesn't get high enough score to flag it as spam.

Any ideas?
 
Last edited by a moderator:

tmurdock

Member
Jul 6, 2015
21
0
51
United States
cPanel Access Level
Root Administrator
Hi there!

Yes, the global filter is supposed to move the message into catch-all email addresses' inbox. When the original message is received from the external source the filter is not applied and does not show up in the log. However when the internal user forwards it to me, the system filter is applied and moves it correctly and shows it in the logs.

The global filter does not seem to apply on the first instance of the email being received. I have tried to move that filter to the top of the list to take precedence but it still seems to have no effect.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
11,718
1,862
363
cPanel Access Level
Root Administrator
It turns out the initial message was sent with base64 encoding, so the text string of the filter technically didn't exist in the message. Solving the issue completely would mean changing the way that message is sent, or handling the filtering differently on the server side.