Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

One user's mail going into Junk folder

Discussion in 'E-mail Discussion' started by OYMSupport, Apr 12, 2016.

  1. OYMSupport

    OYMSupport Registered

    Joined:
    Mar 3, 2016
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Menomonee Falls, WI USA
    cPanel Access Level:
    Root Administrator
    Hello.

    Here's the problem: I have one user whose incoming e-mails are delivered to his Junk folder. He uses IMAP and Squirrel Mail to access his mailbox. I have MailScanner installed, but spam scanning is turned off for their domain. No other users on the same domain are having this problem.

    I do not see any filter rules for this user or his domain.

    Please let me know where to look.

    Thank you!
    Mark
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,943
    Likes Received:
    1,819
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello :)

    Could you search for one of the messages that was delivered to the "Junk" folder in /var/log/exim_mainlog? EX:

    Code:
    exigrep user@domain /var/log/exim_mainlog
    Let us know the output for one of these messages.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. OYMSupport

    OYMSupport Registered

    Joined:
    Mar 3, 2016
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Menomonee Falls, WI USA
    cPanel Access Level:
    Root Administrator
    This is one message that landed in "Junk".
    Code:
    2016-04-12 16:12:12 1aq5bY-0002Q6-60 <= mark.mullarky@example.com H=mail14.ess.barracuda.com [64.235.154.105]:40306 P=esmtps X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=13501 id=BLUPR20MB04680BD089D02DEB2A37EAFAF5950@BLUPR20MB0468.namprd20.prod.outlook.com T="TEST" for lcollins@domain.com
    2016-04-12 16:12:14 1aq5bY-0002Q6-60 => lcollins <lcollins@example.com> R=virtual_user T=virtual_userdelivery
    2016-04-12 16:12:14 1aq5bY-0002Q6-60 Completed
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,943
    Likes Received:
    1,819
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    I don't see anything in the log that suggests the message was detected by SPAM or filtered by Exim. Is the issue reproducable with other email clients or with another webmail application?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,675
    Likes Received:
    84
    Trophy Points:
    328
    cPanel Access Level:
    Root Administrator
    I don't suppose a solution to this was ever found?

    I've got a user experiencing the exact same thing and I cannot for the life of me figure out why.
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,943
    Likes Received:
    1,819
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,675
    Likes Received:
    84
    Trophy Points:
    328
    cPanel Access Level:
    Root Administrator
    Boxtrapper is not enabled on the server.

    The conclusion that I finally came to is that the user has an email client setup somewhere that is checking this email account (probably with IMAP and Push, because it's almost instant) and has a filter set up to send messages that match this criteria to the Junk folder.

    I verified this by noticing that there are 2 different IPs that are logging into the account via IMAP. When I firewall off one of those IPs, and send a message the message stays in the main INBOX on the account. When I re-enable access to that IP address, give it a few minutes, the message is then sent into Junk. Without the IP address firewalled off, when I send a message to the email account the message is almost immediately sent to the Junk folder.
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,943
    Likes Received:
    1,819
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    I'm happy to see you were able to determine the cause of the issue. Thank you for updating us with the outcome.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice