Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Intermittent, Automatic Moves to Trash

Discussion in 'E-mail Discussion' started by tco_jonathan, Dec 30, 2018.

  1. tco_jonathan

    tco_jonathan Registered

    Joined:
    Dec 30, 2018
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Dallas TX
    cPanel Access Level:
    Root Administrator
    Hi All,

    I've been searching, off and on, for months trying to figure out what's going on, but I'm lost and hope you can help.

    Intermittently, emails are move from my Inbox upon receipt into the server's Trash folder. I specify the "server's" Trash folder because it doesn't appear in my email client (Outlook) on any of my devices (tablet, phone, desktop). I literally have to log into RoundCube to view the deleted messages and move them back to the Inbox. In terms of frequency, this happens at least once a week.

    I've checked the logs and can find nothing to explain this. I can find no explanation for the move. And it's entirely inconsistent. It happens with messages from multiple domains, hosts, content. Sometimes new messages, sometimes messages in the middle of a thread.

    My first thought was a spam filter, but I turned off SpamAssassin entirely to check, and it wasn't that.

    Some details:
    CentOS 7.5
    WHM/cPanel v76.0.14

    Any advice, hints, tips, or points in the right direction would be very much appreciated.

    Thank you,

    Jonathan
     
    #1 tco_jonathan, Dec 30, 2018
  2. tco_jonathan

    tco_jonathan Registered

    Joined:
    Dec 30, 2018
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Dallas TX
    cPanel Access Level:
    Root Administrator
    Silly me; should have read the guide beforehand:

    /etc/redhat-release:
    CentOS Linux release 7.5.1804 (Core)

    /usr/local/cpanel/version:
    11.76.0.14

    /var/cpanel/envtype:
    standard
     
    #2 tco_jonathan, Dec 30, 2018
  3. cPanelLauren

    cPanelLauren Forums Analyst II Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    6,161
    Likes Received:
    474
    Trophy Points:
    233
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hi @tco_jonathan


    I think the best course of action would be to enable dovecot's more detailed logging. This only requires a couple of changes but to make it easier I created a bash script for you to be run as root:

    1.
    Code:
    touch more_dovecot_logs
    2. Add the following to more_dovecot_logs:
    Code:
    #!/bin/sh
cd /var/cpanel/templates/dovecot2.2
cp main.default main.local
sed -i '677i mail_plugins = $mail_plugins mail_log notify' main.local
sed -i '746i plugin { \
  # Events TWEET available to log: append copy delete expunge flag_change mailbox_delete mailbox_rename undelete \
  mail_log_events = append copy delete expunge flag_change mailbox_delete mailbox_rename undelete \
  # Available fields: uid, box, msgid, from, subject, size, vsize, flags \
  # size and vsize are available only for expunge and copy events. \
  mail_log_fields = uid box msgid size subject flags \
}' main.local
/scripts/builddovecotconf
/scripts/restartsrv_dovecot
    Keep in mind the sed here correlates to the line number to enter the information into - it could be slightly different but this worked for me
    3.
    Code:
    chmod +x more_dovecot_logs
    4. run the script
    Code:
    ./more_dovecot_logs

    Once that's done dovecot will begin logging much more detailed information to
    Code:
    /var/log/maillog
    including any time a message is moved from one folder to another. It might be a good starting point to finding out what is going on. When the issue occurs again you can see exactly what happened.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 cPanelLauren, Jan 3, 2019
    Last edited: Jan 3, 2019
  4. tco_jonathan

    tco_jonathan Registered

    Joined:
    Dec 30, 2018
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Dallas TX
    cPanel Access Level:
    Root Administrator
    Hi @cPanelLauren

    Thank you for your detailed advice. I executed everything you suggested and waited. This morning it happened again, finally. (Or, rather, I noticed it happening again).

    Here's the log for the time in question:

    Code:
    Jan 12 08:02:29 server dovecot: lmtp(26797): Connect from local
Jan 12 08:02:29 server dovecot: lmtp(jonathan@mydomain.com): msgid=<AF1780B0-3D60-4F26-8314-8BCE2B37BF99@sendersdomain.com>: saved mail to INBOX
Jan 12 08:02:29 server dovecot: lmtp(26797): Disconnect from local: Successful quit
    I read the log going back and forward by 10 minutes and saw nothing else of note.
     
    #4 tco_jonathan, Jan 12, 2019
(You must log in or sign up to post here.)
Loading...
Similar Threads - Intermittent Automatic Moves
  1. PeteS

    TLS connections refused (intermittently) after v80.0.13 update

    PeteS, Jun 6, 2019, in forum: Security
    Replies:
    3
    Views:
    185
    cPanelLauren
    Jun 7, 2019
  2. Jon Erickson

    VPS intermittently unreachable - hostname unresolvable

    Jon Erickson, Apr 16, 2019, in forum: Workarounds and Optimization
    Replies:
    3
    Views:
    227
    cPanelLauren
    Apr 16, 2019
  3. par_sebastien

    SOLVED Intermittent internal server errors after turning on mod_http2

    par_sebastien, Sep 15, 2017, in forum: EasyApache
    Replies:
    5
    Views:
    1,948
    par_sebastien
    Sep 21, 2017
  4. MajorLancelot

    Best Practice: Automatic Updates vs Manual Updates

    MajorLancelot, Jun 3, 2019, in forum: Workarounds and Optimization
    Replies:
    3
    Views:
    134
    sparek-3
    Jun 4, 2019
  5. avinash.pudota

    Automatically set Reseller's Shared IP as account's IP During Transfer?

    avinash.pudota, May 21, 2019, in forum: Data Protection
    Replies:
    2
    Views:
    311
    cPanelMichael
    May 29, 2019

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice