Recipient discarded

[Mago]

I'm having an issue in the track delivery, emails from 1 specific address are marked as success but then discarded :

Found another old thread with the same issue, Staff member asked for the /var/log/exim_mainlog but there was no more replies that I could follow.
I don't think I can get my /var/log/exim_mainlog since I don't have root access, but already asked host support for it, will update if they deliver it.

On my side there is a blacklist filter, but none matches the address or IP from the person that is sending the email.

What could I check for problems?

Thanks.

vent:	success
User:	user
Domain:	mydomain.com
From Address:	[email protected]
Sender:	[email protected]
Sent Time:	Jan 20, 2022, 10:44:10 AM
Sender Host:	IP
Sender IP:	IP
Authentication:	dovecot_plain
Spam Score:
Recipient:	discarded
Delivery User:	discarded
Delivery Domain:
Delivered To:	discarded
Router:
Transport:
Out Time:	Jan 20, 2022, 10:44:10 AM
ID:	1nAbUC-0001MD-1c
Delivery Host:	localhost
Delivery IP:	127.0.0.1
Size:	6.41 KB
Result:	Accepted

 

[cPanelAnthony]

Hello! It is likely there is some type of filter in place, but we won't know without the exim_mainlog entries. Could you ask your web hosting provider to get all entries related to the email ID in question?

 

[Mago]

Webhosting provided the exigrep [email protected] /var/log/exim_mainlog

2022-01-17 15:15:54.404 [177130] 1n9YPu-000k4w-Sl H=([IP]) [IP]:56935 I=[IP]:465 Warning: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as NOT spam (1.2)"
2022-01-17 15:15:54.405 [177130] 1n9YPu-000k4w-Sl <= [email protected] H=([IP]) [IP]:56935 I=[IP]:465 P=esmtpsa L.- X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no SNI=mydomain.com A=dovecot_plain:[email protected] S=26686 M8S=0 RT=429496 id=[email protected] T="Fwd: Action Required - Imports Longstandings - Gate Out full with\n Det/Dem Notification" from <[email protected]> for [email protected] [email protected] [email protected] [email protected]
2022-01-17 15:15:59.088 [177530] 1n9YPu-000k4w-Sl => discarded (system filter)
2022-01-17 15:15:59.089 [177530] 1n9YPu-000k4w-Sl Completed QT=8s

2022-01-17 15:16:34.988 [177130] 1n9YQZ-000k4w-MX H=([IP]) [IP]:56935 I=[IP]:465 Warning: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as NOT spam (1.7)"
2022-01-17 15:16:34.989 [177130] 1n9YQZ-000k4w-MX <= [email protected] H=([IP]) [IP]:56935 I=[IP]:465 P=esmtpsa L.- X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no SNI=mydomain.com A=dovecot_plain:[email protected] S=62200 M8S=0 RT=429496 id=[email protected] T="FWD: EMAIL SUBJECT" from <[email protected]> for [email protected] [email protected] [email protected] [email protected]
2022-01-17 15:16:45.401 [179352] 1n9YQZ-000k4w-MX => discarded (system filter)
2022-01-17 15:16:45.402 [179352] 1n9YQZ-000k4w-MX Completed QT=13s

2022-01-18 18:00:48.827 [102478] 1n9xT1-000Qes-7u H=([IP]) [IP]:63815 I=[IP]:465 Warning: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as NOT spam (1.7)"
2022-01-18 18:00:48.828 [102478] 1n9xT1-000Qes-7u <= [email protected] H=([IP]) [IP]:63815 I=[IP]:465 P=esmtpsa L.- X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no SNI=mydomain.com A=dovecot_plain:[email protected] S=65902 M8S=0 RT=429496 id=[email protected] T="FWD: EMAIL SUBJECT" from <[email protected]> for


That's the entire text they sent. I redacted the emails and IP, not sure if I should had done that. The sender of the email was "[email protected]" received and discarded by "[email protected]"
The ones from otherdomain are third party emails from 3 different accounts, some of those addresses were marked as filtered before (not received, and spam score of 0) when sending to "user", "user3" @mydomain.com and other account also from my domain but not mentioned in the log.

 

[cPanelAnthony]

Hello! The following indicates to me that there may be an email filter discarding this message.

2022-01-17 15:16:45.401 [179352] 1n9YQZ-000k4w-MX => discarded (system filter)

Could you review all email filters and verify whether or not this appears to be the issue?

How to Configure Email Filters | cPanel & WHM Documentation

Email filters use the criteria that you specify to determine how to handle email messages.

docs.cpanel.net