Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED Mark "not spam" in roundcube

Discussion in 'E-mail Discussion' started by Nicola Urbinati, Mar 4, 2019.

  1. Nicola Urbinati

    Nicola Urbinati Well-Known Member

    Joined:
    Feb 1, 2017
    Messages:
    67
    Likes Received:
    10
    Trophy Points:
    8
    Location:
    Italy
    cPanel Access Level:
    Root Administrator
    Hi,

    It occurs that some mails between the same domain or between domains on the same server are put in the Spam directory.
    Using Roundcube, I put them back in Incoming dir, but they come back in the Spam dir.

    Here is an example:
    Code:
    Return-Path: <info@example.com>
    Delivered-To: urbaman@example.com
    Received: from srvcp01.example.com
    by srvcp01.example.com with LMTP
    id ACr5DkmAfVx5FygAf5IjpA
    (envelope-from <info@example.com>)
    for <urbaman@example.com>; Mon, 04 Mar 2019 20:45:13 +0100
    Return-path: <info@example.com>
    Envelope-to: urbaman@example.com
    Delivery-date: Mon, 04 Mar 2019 20:45:13 +0100
    Received: from [::1] (port=36196 helo=srvcp01.example.com)
    by srvcp01.example.com with esmtpa (Exim 4.91)
    (envelope-from <info@example.com>)
    id 1h0tWP-00B1Vg-Bf
    for urbaman@example.com; Mon, 04 Mar 2019 20:45:09 +0100
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary="=_908127cc2d9daa6ad4fefa28a4e0456a"
    Date: Mon, 04 Mar 2019 20:45:09 +0100
    From: Servizio Informazioni <info@example.com>
    To: urbaman@example.com
    Subject: Prova
    Organization: Dreamlord Press
    Message-ID: <bddef696069a432290f085795652fdce@example.com>
    X-Sender: info@example.com
    User-Agent: Roundcube Webmail/1.3.7
    X-DreamlordPress-MailScanner-Information: Please contact the ISP for more information
    X-DreamlordPress-MailScanner-ID: 1h0tWP-00B1Vg-Bf
    X-DreamlordPress-MailScanner: Found to be clean
    X-DreamlordPress-MailScanner-SpamCheck: not spam (whitelisted),
    SpamAssassin (not cached, score=-0.998, required 5,
    ALL_TRUSTED -1.00, HTML_MESSAGE 0.00, URIBL_BLOCKED 0.00)
    X-DreamlordPress-MailScanner-From: info@example.com
    X-Spam-Status: No
    
    It seems not to be flagged as spam.
    The very same message, with swapped sender-receiver, ends in Incoming not in Spam, so something strange is happening on one of the mail accounts.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #1 Nicola Urbinati, Mar 4, 2019
    Last edited by a moderator: Mar 4, 2019
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,009
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @Nicola Urbinati,

    Can you post the entry from /var/log/exim_mainlog for one of the affected messages? EX:

    Code:
    exigrep subject /var/log/exim_mainlog
    Replace "subject" with the subject associated with one of the emails affected by this issue.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Nicola Urbinati

    Nicola Urbinati Well-Known Member

    Joined:
    Feb 1, 2017
    Messages:
    67
    Likes Received:
    10
    Trophy Points:
    8
    Location:
    Italy
    cPanel Access Level:
    Root Administrator
    Hi,

    Here is the output of that code.

    Code:
    2019-03-04 20:41:02 1h0tSQ-00B14q-1A <= info@domain.it H=(srvcp01.urbaman.it) [::1]:60074 P=esmtpa A=dovecot_login:info@domain.it S=1404 id=5d854093e519e3fa1a8e362680c65612@domain.it T="Prova" for urbaman@domain.it
    2019-03-04 20:41:04 1h0tSQ-00B14q-1A => urbaman <urbaman@domain.it> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <urbaman@domain.it> XFr1DlB/fVzzECgAf5IjpA Saved"
    2019-03-04 20:41:04 1h0tSQ-00B14q-1A Completed
    
    2019-03-04 20:43:53 1h0tVB-00B1IG-Qz <= urbaman@domain.it H=(srvcp01.urbaman.it) [::1]:34816 P=esmtpa A=dovecot_login:urbaman@domain.it S=1460 id=43c0682db9348abb81106de91efc5bf7@domain.it T="Prova" for info@domain.it
    2019-03-04 20:43:56 1h0tVB-00B1IG-Qz => info <info@domain.it> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <info@domain.it> eTdjOvt/fVwyFCgAf5IjpA Saved"
    2019-03-04 20:43:56 1h0tVB-00B1IG-Qz Completed
    
    2019-03-04 20:45:09 1h0tWP-00B1Vg-Bf <= info@domain.it H=(srvcp01.urbaman.it) [::1]:36196 P=esmtpa A=dovecot_login:info@domain.it S=1404 id=bddef696069a432290f085795652fdce@domain.it T="Prova" for urbaman@domain.it
    2019-03-04 20:45:13 1h0tWP-00B1Vg-Bf => urbaman <urbaman@domain.it> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <urbaman@domain.it> ACr5DkmAfVx5FygAf5IjpA Saved"
    2019-03-04 20:45:13 1h0tWP-00B1Vg-Bf Completed
    
    2019-03-04 21:03:06 1h0tnm-00B354-Ab <= info@domain.it H=(srvcp01.urbaman.it) [::1]:55428 P=esmtpa A=dovecot_login:info@domain.it S=1412 id=3285ab7b190f4913c6e9d598113aae66@domain.it T="Prova" for st-3-c2gbs53hyp@glockapps.com
    2019-03-04 21:03:08 1h0tnm-00B354-Ab Sender identification U=domain D=domain.it S=info@domain.it
    2019-03-04 21:03:08 1h0tnm-00B354-Ab SMTP connection outbound 1551729788 1h0tnm-00B354-Ab domain.it st-3-c2gbs53hyp@glockapps.com
    2019-03-04 21:03:09 1h0tnm-00B354-Ab => st-3-c2gbs53hyp@glockapps.com R=dkim_lookuphost T=dkim_remote_smtp H=mail.glockapps.com [52.4.163.16] X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.0.0 OK: queued as c965cd40571fdbcdb3862402b00d1b55"
    2019-03-04 21:03:09 1h0tnm-00B354-Ab Completed
    And these are the last two tests, with the same result (the first goes to inbox, the second to spam)

    Code:
    2019-03-05 01:31:00 1h0xz2-00BTFS-Qc <= urbaman@domain.it H=(srvcp01.urbaman.it) [::1]:51756 P=esmtpa A=dovecot_login:urbaman@domain.it S=1460 id=584030804e317e4b423a6a1444ff3916@domain.it T="Prova" for info@domain.it
    2019-03-05 01:31:07 1h0xz2-00BTFS-Qc => info <info@domain.it> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <info@domain.it> W8qCJEvDfVwduCkAf5IjpA Saved"
    2019-03-05 01:31:07 1h0xz2-00BTFS-Qc Completed
    
    2019-03-05 01:31:32 1h0xzY-00BTI9-4M <= info@domain.it H=(srvcp01.urbaman.it) [::1]:52334 P=esmtpa A=dovecot_login:info@domain.it S=1404 id=aa491f38c58f9a4f39f7db1b5f9539e4@domain.it T="Prova" for urbaman@domain.it
    2019-03-05 01:31:35 1h0xzY-00BTI9-4M => urbaman <urbaman@domain.it> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <urbaman@domain.it> mAYBJGfDfVwduCkAf5IjpA Saved"
    2019-03-05 01:31:35 1h0xzY-00BTI9-4M Completed
    
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,009
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @Nicola Urbinati,

    I don't see anything that indicates why those emails are automatically moved to the SPAM folder. Can you open a support ticket so we can take a closer look to see why that's happening? You can post the ticket number here and we'll link this thread to it.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. Nicola Urbinati

    Nicola Urbinati Well-Known Member

    Joined:
    Feb 1, 2017
    Messages:
    67
    Likes Received:
    10
    Trophy Points:
    8
    Location:
    Italy
    cPanel Access Level:
    Root Administrator
    Ticket: 11596945
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    cPanelMichael likes this.
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,009
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    To update, it looks like it was an individual email client connected via IMAP that was moving the message to the SPAM folder. Let us know if you have any additional concerns.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. Nicola Urbinati

    Nicola Urbinati Well-Known Member

    Joined:
    Feb 1, 2017
    Messages:
    67
    Likes Received:
    10
    Trophy Points:
    8
    Location:
    Italy
    cPanel Access Level:
    Root Administrator
    Correct, thank you.

    I have no more issues on this front.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    cPanelMichael likes this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice