mail filter bypassing unexpectedly

cPanel & WHM Version
94.0 build 17

axeblokie

Registered
Nov 12, 2021
2
0
1
Rochdale, England
cPanel Access Level
Root Administrator
Hi Guys.
First time post, so go easy on me!

I have a customer who has setup a bunch of filters to act as a distribution group. Emails one address, and it redirects to several others.

I can email it from any of the addresses I have access to, cPanel IMAP, MS365, Salesforce CRM, Old School POP on standalone POP server, it hits the filter and branches out to the redirects perfectly fine every time.
However, this customer emails the same thing, and it ignores the filters and goes straight into the mailbox instead.

The only difference I can see is my emails all say Transport: dovecot_virtual_delivery
His all say Transport: dovecot_virtual_delivery_no_batch

I've checked Spam Assassin, whitelists, other filters, forwarders, default address, everything I can think of.

My success;
Event: success success
User: -remote-
Domain:
From Address: [email protected]
Sender:
Sent Time: Nov 12, 2021, 3:43:15 PM
Sender Host: mail-eopbgr140108.outbound.protection.outlook.com
Sender IP: 40.107.14.108
Authentication: localdelivery
Spam Score: 1.9
Recipient: [email protected]
Delivery User: cpaneluser
Delivery Domain: domain.tld
Delivered To: [email protected]
Router: virtual_user
Transport: dovecot_virtual_delivery
Out Time: Nov 12, 2021, 3:43:15 PM
ID: 1mlYiW-001b8h-2k
Delivery Host: localhost
Delivery IP: 127.0.0.1
Size: 13.99 KB
Result: Accepted

His failure;
Event: success success
User: -remote-
Domain:
From Address: [email protected]
Sender:
Sent Time: Nov 12, 2021, 3:37:15 PM
Sender Host: mail-eopbgr100127.outbound.protection.outlook.com
Sender IP: 40.107.10.127
Authentication: localdelivery
Spam Score: 4.3
Recipient: [email protected]
Delivery User: cpaneluser
Delivery Domain: domain.tld
Delivered To: [email protected]
Router: virtual_user
Transport: dovecot_virtual_delivery_no_batch
Out Time: Nov 12, 2021, 3:37:15 PM
ID: 1mlYcg-001a10-U4
Delivery Host: localhost
Delivery IP: 127.0.0.1
Size: 29.7 KB
Result: Accepted
 
Last edited: