The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

One user's mail going into Junk folder

Discussion in 'E-mail Discussions' started by OYMSupport, Apr 12, 2016.

  1. OYMSupport

    OYMSupport Registered

    Joined:
    Mar 3, 2016
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Menomonee Falls, WI USA
    cPanel Access Level:
    Root Administrator
    Hello.

    Here's the problem: I have one user whose incoming e-mails are delivered to his Junk folder. He uses IMAP and Squirrel Mail to access his mailbox. I have MailScanner installed, but spam scanning is turned off for their domain. No other users on the same domain are having this problem.

    I do not see any filter rules for this user or his domain.

    Please let me know where to look.

    Thank you!
    Mark
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    671
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Could you search for one of the messages that was delivered to the "Junk" folder in /var/log/exim_mainlog? EX:

    Code:
    exigrep user@domain /var/log/exim_mainlog
    Let us know the output for one of these messages.

    Thank you.
     
  3. OYMSupport

    OYMSupport Registered

    Joined:
    Mar 3, 2016
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Menomonee Falls, WI USA
    cPanel Access Level:
    Root Administrator
    This is one message that landed in "Junk".
    Code:
    2016-04-12 16:12:12 1aq5bY-0002Q6-60 <= mark.mullarky@example.com H=mail14.ess.barracuda.com [64.235.154.105]:40306 P=esmtps X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=13501 id=BLUPR20MB04680BD089D02DEB2A37EAFAF5950@BLUPR20MB0468.namprd20.prod.outlook.com T="TEST" for lcollins@domain.com
    2016-04-12 16:12:14 1aq5bY-0002Q6-60 => lcollins <lcollins@example.com> R=virtual_user T=virtual_userdelivery
    2016-04-12 16:12:14 1aq5bY-0002Q6-60 Completed
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    671
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    I don't see anything in the log that suggests the message was detected by SPAM or filtered by Exim. Is the issue reproducable with other email clients or with another webmail application?

    Thank you.
     
  5. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,383
    Likes Received:
    23
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    I don't suppose a solution to this was ever found?

    I've got a user experiencing the exact same thing and I cannot for the life of me figure out why.
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    671
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  7. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,383
    Likes Received:
    23
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    Boxtrapper is not enabled on the server.

    The conclusion that I finally came to is that the user has an email client setup somewhere that is checking this email account (probably with IMAP and Push, because it's almost instant) and has a filter set up to send messages that match this criteria to the Junk folder.

    I verified this by noticing that there are 2 different IPs that are logging into the account via IMAP. When I firewall off one of those IPs, and send a message the message stays in the main INBOX on the account. When I re-enable access to that IP address, give it a few minutes, the message is then sent into Junk. Without the IP address firewalled off, when I send a message to the email account the message is almost immediately sent to the Junk folder.
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,811
    Likes Received:
    671
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page