Internal User email sent to a particular internal user going to Junk folder

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
lijulalu
Posts: 15
Joined: Fri Oct 03, 2014 8:40 am

Internal User email sent to a particular internal user going to Junk folder

Post by lijulalu »

Dear Administrators/Friends,

I am facing a quite strange issue in my Zimbra 8.5.1_GA_3056.FOSS

The issue is one if one user ab@xyz.com send a mail to ba@qrs.com (both domains are internal to the same mail server) its going to Junk folder of ba@qrs.com.In return there is no any problem.Also ab@xyz.comsending any mail any of the other 299 users in the mail server there is no problem at all. I tried switching off IMAP and POP access of ba@qrs.com suspecting the email clients or antivirus.Still the same issue persists.

I had tried all kindof whitelisting and the following stuffs.But there is no luck.Please help me..

1.
add the line in /opt/zimbra/conf/amavisd.conf.in
‘xyz.com’ => -10.0,


2.
add the following content in /opt/zimbra/conf/amavis.conf.in

read_hash(\%whitelist_sender, ‘/opt/zimbra/whitelist’);
read_hash(\%blacklist_sender, ‘/opt/zimbra/blacklist’);
read_hash(\%spam_lovers, ‘/opt/zimbra/spamlovers’);

3.
add in /opt/zimbra/whitelist
xyz.com

4.
add in /opt/zimbra/conf/salocal.cf.in
whitelist_from *@test.com
score FH_DATE_PAST_20XX 0.0

5.
add in /opt/zimbra/conf/spamassassin/local.cf
trusted_networks "Added all my local networks"

6.
restart the services


Kind Regards,
Liju...
10424bofh
Outstanding Member
Outstanding Member
Posts: 285
Joined: Sat Sep 13, 2014 1:15 am

Re: Internal User email sent to a particular internal user going to Junk folder

Post by 10424bofh »

you did not mention that you have checked the filters of the ba mailbox.

go and check the filters :))
lijulalu
Posts: 15
Joined: Fri Oct 03, 2014 8:40 am

Re: Internal User email sent to a particular internal user going to Junk folder

Post by lijulalu »

Dear Friend,

There is no any filters for both these users ..All I checked...

Thanks,Liju
lijulalu
Posts: 15
Joined: Fri Oct 03, 2014 8:40 am

Re: Internal User email sent to a particular internal user going to Junk folder

Post by lijulalu »

phoenix wrote:Why don't you look at the headers of the mail that goes to the junk folder? That should give you details of why it ended up being marked as spam.
Dear Pheonix/Friends,

For just testing I disabled antispam,antivirus,amavis one at a time,using the following set of commands.

zmprov ms `zmhostname` -zimbraServiceEnabled antispam
zmprov ms `zmhostname` -zimbraServiceEnabled antivirus

zmprov ms `zmhostname` -zimbraServiceEnabled amavis.


When I disabled amavis the email is going to Inbox without fail. (tried 5 mails)

That means some thing inside amavis component triggers this issue.


Regards,
Liju
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Internal User email sent to a particular internal user going to Junk folder

Post by phoenix »

Why don't you look at the headers of the mail that goes to the junk folder? That should give you details of why it ended up being marked as spam.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
lijulalu
Posts: 15
Joined: Fri Oct 03, 2014 8:40 am

Re: Internal User email sent to a particular internal user going to Junk folder

Post by lijulalu »

Sorry Friends ,again a small update..

After restarting server the issue repeating again...even if all above mentioned services are down (antispam,amavis,antivirus)


Regards,
Liju
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Internal User email sent to a particular internal user going to Junk folder

Post by phoenix »

lijulalu wrote:
phoenix wrote:Why don't you look at the headers of the mail that goes to the junk folder? That should give you details of why it ended up being marked as spam.
Dear Pheonix/Friends,

For just testing I disabled antispam,antivirus,amavis one at a time,using the following set of commands.

zmprov ms `zmhostname` -zimbraServiceEnabled antispam
zmprov ms `zmhostname` -zimbraServiceEnabled antivirus

zmprov ms `zmhostname` -zimbraServiceEnabled amavis.


When I disabled amavis the email is going to Inbox without fail. (tried 5 mails)

That means some thing inside amavis component triggers this issue.


Regards,
Liju
Of course it goes to the Inbox now, you've just disabled all the anti-spam and anti-virus system - that doesn' t help resolve the problem. Why don't you answer my comment from my last post?
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
lijulalu
Posts: 15
Joined: Fri Oct 03, 2014 8:40 am

Re: Internal User email sent to a particular internal user going to Junk folder

Post by lijulalu »

Dear Pheonix,

The headers are as below.I didnt notice anything fishy.Please have an eye.

Return-Path: abc@xyz.com
Received: from mail-svr.xxx.int (LHLO mail.XXX.mv)
(192.XXX.XXX.XXX) by mail-svr.xxx.int with LMTP; Sat, 25 Nov 2017
14:46:22 +0500 (MVT)
Received: from mail.XXX.mv (localhost [127.0.0.1])
by mail.XXX.mv (Postfix) with ESMTPS id 7876B6E2AEA;
Sat, 25 Nov 2017 14:46:22 +0500 (MVT)
Received: from mail.XXX.mv (localhost [127.0.0.1])
by mail.XXX.com.mv (Postfix) with ESMTPS id 6AB596E2AFC;
Sat, 25 Nov 2017 14:46:22 +0500 (MVT)
Received: from mail-svr.xxx.int (mail-svr.xxx.int [192.XXX.XXX.XXX])
by mail.XXX.com.mv (Postfix) with ESMTP id 5CC386E2AEA
for <ant....pa...@qrs.com>; Sat, 25 Nov 2017 14:46:22 +0500 (MVT)
Date: Sat, 25 Nov 2017 14:46:22 +0500 (MVT)
From: Andxxx Stxxx Mcxxx <abc@xyz.com>
To: Antxxx Paxxx <ba@qrs.com>
Message-ID: <746618125.3730.1511603182288.JavaMail.zimbra@xyz.com>
Subject: Test Mail_09
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_3729_749985517.1511603182287"
X-Originating-IP: [192.XXX.XXX.XXX]
X-Mailer: Zimbra 8.5.1_GA_3056 (ZimbraWebClient - FF57 (Win)/8.5.1_GA_3056)
Thread-Topic: Test Mail_09
Thread-Index: b4JRdPOll48vu7yEZNo50XDMOmpIZg==
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Internal User email sent to a particular internal user going to Junk folder

Post by phoenix »

lijulalu wrote:The headers are as below.I didnt notice anything fishy.
Of course there's nothing 'fishy', you've disabled the anti-spam & anti-virus systems so no headers from that will be added. Look at some of the previous mail that ended up in the Junk folder. You also don't want to run a server without the anti-spam and anti-virus systems enabled - I'd suggest you enable them again.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
lijulalu
Posts: 15
Joined: Fri Oct 03, 2014 8:40 am

Re: Internal User email sent to a particular internal user going to Junk folder

Post by lijulalu »

phoenix wrote:
lijulalu wrote:The headers are as below.I didnt notice anything fishy.
Of course there's nothing 'fishy', you've disabled the anti-spam & anti-virus systems so no headers from that will be added. Look at some of the previous mail that ended up in the Junk folder. You also don't want to run a server without the anti-spam and anti-virus systems enabled - I'd suggest you enable them again.

Dear Pheonix,

I re-enabled all services that I disabled earlier and simulated.

The header is as follows...

Return-Path: abc@xyz.com
Received: from mail-svr.xxx.int (LHLO mail.XXX.mv)
(192.XXX.XXX.XXX) by mail-svr.xxx.int with LMTP; Sat, 25 Nov 2017
18:03:47 +0500 (MVT)
Received: from localhost (localhost [127.0.0.1])
by mail.XXX.mv (Postfix) with ESMTP id 399026E2AD9;
Sat, 25 Nov 2017 18:03:47 +0500 (MVT)
Received: from mail.XXX.mv ([127.0.0.1])
by localhost (mail-svr.xxx.int [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id nSRuXtsVWLUp; Sat, 25 Nov 2017 18:03:47 +0500 (MVT)
Received: from localhost (localhost [127.0.0.1])
by mail.XXX.mv (Postfix) with ESMTP id 120FE6E2AFC;
Sat, 25 Nov 2017 18:03:47 +0500 (MVT)
Received: from mail.XXX.mv ([127.0.0.1])
by localhost (mail-svr.xxx.int [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id rWMEmLnl1iA5; Sat, 25 Nov 2017 18:03:46 +0500 (MVT)
Received: from mail-svr.xxx.int (mail-svr.xxx.int [192.XXX.XXX.XXX])
by mail.XXX.mv (Postfix) with ESMTP id DEEB86E2AD9
for <ba@qrs.com>; Sat, 25 Nov 2017 18:03:46 +0500 (MVT)
Date: Sat, 25 Nov 2017 18:03:46 +0500 (MVT)
From: Andxxx Stxxx Mcxxx <abc@xyz.com>
To: Antxxx Paxxx <ba@qrs.com>
Message-ID: <2018327803.1266.1511615026811.JavaMail.zimbra@xyz.com>
Subject: Test Mail_090
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_1265_1809604790.1511615026804"
X-Originating-IP: [192.XXX.XXX.XXX]
X-Mailer: Zimbra 8.5.1_GA_3056 (ZimbraWebClient - FF57 (Win)/8.5.1_GA_3056)
Thread-Topic: Test Mail_090
Thread-Index: +fdqre+kBRcZ5naCHGv0BA5hv4wxTA==


Please check.

Thanks and Regards,
Liju
Post Reply