SOLVED Strange email forwarding

[Maning]

I have a problem with a domain on a server. Email came successfully but it forward to a gmail account. customer hasn't add a forwarder or a filter.

Event:    success success
Sender User:    clientuser
Sender Domain:    clientdomain
From Address:    [email protected]
Sender:    [email protected]
Sent Time:    Nov 6, 2020, 2:25:14 PM
Sender Host:    mail.host.com
Sender IP:    xxx.xx.xx.xx
Authentication:    forwarder
Spam Score:    3.5
Recipient:    [email protected]
Delivered To:    [email protected]
Delivery User:    -remote-
Delivery Domain: 
Router:    dkim_lookuphost
Transport:    dkim_remote_smtp
Out Time:    Nov 6, 2020, 2:29:14 PM
ID:    1kb0no-0000sP-Uf
Delivery Host:    gmail-smtp-in.l.google.com
Delivery IP:    74.125.140.27
Size:    9.99 KB
Result:    Accepted

 

[andrew.n]

Do you see any forwarders in his cPanel account? Is there any forwarder set inside Horde or RoundCube?

 

[cPRex]

Seeing the full log from /var/log/exim_mainlog may be more useful than the headers here. Can you search for the mail ID or subject line in the /var/log/exim_mainlog file to see what it says on the cPanel side of things?

 

[Maning]

Thank you for your reply. I found a forwarder inside mail account in cpanel.

 

[andrew.n]

Great find!

 

[cPRex]

Awesome - glad you were able to track that down!