Some incoming e-mails delivered to junk folder (SpamAssassin disabled, no filters)

[David Santos]

I have [at least] one client that is getting some e-mails delivered to the .Junk folder, including messages from senders with which they interact on a daily basis. They access the messages via POP, so they have to keep someone logged in to the webmail to move messages from .Junk to the inbox so that it will be accessible by their e-mail clients.

The Exim log shows the message as delivered:

2015-04-23 08:49:42 1YlFdW-0002zW-9N <= [email protected] H=mail1.server.com [x.x.x.x]:46255 P=esmtps X=TLSv1.2:DHE-RSA-AES256-SHA:256 S=63923 id=xxxx T="FW: xxxxx" for [email protected] [email protected]
2015-04-23 08:49:42 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1YlFdW-0002zW-9N
2015-04-23 08:49:42 1YlFdW-0002zW-9N => user <[email protected]> R=virtual_user T=virtual_userdelivery
2015-04-23 08:49:42 1YlFdW-0002zW-9N => user2 <[email protected]> R=virtual_user T=virtual_userdelivery
2015-04-23 08:49:42 1YlFdW-0002zW-9N Completed

Still, messages from that sender (among a few others) get delivered to .Junk.

SpamAssassin is disabled, and there are no filters that would affect this delivery. The only filter on the server is one placed in the system configuration file that delivers copies of e-mails to their supervisor's account (so that they can see how their employees interact with clients), with the format:

if first_delivery
  and ("$h_to:, $h_cc:" contains "@myotherclient.com.br")
  or ("$h_from:" contains "@myotherclient.com.br")
then
  unseen deliver "[email protected]"
endif

This filter isn't even about the same domain, so it shouldn't matter, and on the affected account there are no filters whatsoever.

What I want to know is this: is there a way for an e-mail to end up in .Junk besides being sent there by SpamAssassin or a [global or account] filter? Is there another log that would tell me why it ended up there in the first place?

 

[cPanelMichael]

Hello,

Messages should not redirect to the ".Junk" folder if you have no filter rules or SpamAssassin configuration rules that move it there. Could you open a support ticket using the link in my signature so we can review your system and verify where the redirect stems from? You can post the ticket number here so we can update this thread with the outcome.

Thank you.

 

[David Santos]

Request ID #: 6420841

 

[cPanelMichael]

To update, it was suggested the rule was added to the individual email client to move the mail to the .Junk folder. Feel free to update the support ticket with authentication details if you would like us to take a closer look.

Thank you.