Zimbra moving whitelisted email to SPAM folder

[Yves Pires]

Release 8.8.12.GA.3794.UBUNTU16.64 UBUNTU16_64 FOSS edition, Patch 8.8.12_P1 proxy.

user1@domain.com sends email to user2@domain.com, zimbra move email to spam folder, this only happens between those 2 users.

[DualBoot]

I bet on a filter rule.

[Yves Pires]

I bet on a filter rule.

No filters

I even deleted and recreated the email account, problem persists.

[DualBoot]

weird, the header has no score for filtering into SPAM.
Check the log of the mailbox.

Regards,

[Yves Pires]

weird, the header has no score for filtering into SPAM.
Check the log of the mailbox.

Regards,

seems ok, but zimbra still move email to spam

Code: Select all

Jun 17 08:27:05 sedici postfix/submission/smtpd[26070]: connect from XXX.XXX.75.177.infopasa.com.br[177.75.XXX.XXX]
Jun 17 08:27:05 sedici postfix/submission/smtpd[26070]: NOQUEUE: filter: RCPT from XXX.XXX.75.177.infopasa.com.br[177.75.XXX.XXX]: <rodrigo@domain.com.br>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10026; from=<rodrigo@domain.com.br> to=<jair.junior@domain.com.br> proto=ESMTP helo=<RODRIGOPC>
Jun 17 08:27:05 sedici postfix/submission/smtpd[26070]: AE426360EA2: client=XXX.XXX.75.177.infopasa.com.br[177.75.XXX.XXX], sasl_method=LOGIN, sasl_username=rodrigo@domain.com.br
Jun 17 08:27:05 sedici postfix/submission/smtpd[26070]: AE426360EA2: filter: RCPT from XXX.XXX.75.177.infopasa.com.br[177.75.XXX.XXX]: <rodrigo@domain.com.br>: Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10026; from=<rodrigo@domain.com.br> to=<secretaria@domain2.com.br> proto=ESMTP helo=<RODRIGOPC>
Jun 17 08:27:05 sedici postfix/cleanup[12016]: AE426360EA2: message-id=<00ab01d6449a$3a7aff80$af70fe80$@domain.com.br>
Jun 17 08:27:05 sedici postfix/qmgr[4325]: AE426360EA2: from=<rodrigo@domain.com.br>, size=74495, nrcpt=2 (queue active)
Jun 17 08:27:06 sedici postfix/dkimmilter/smtpd[12020]: connect from localhost[127.0.0.1]
Jun 17 08:27:06 sedici postfix/dkimmilter/smtpd[12020]: 06DBD360F42: client=localhost[127.0.0.1]
Jun 17 08:27:06 sedici postfix/cleanup[11688]: 06DBD360F42: message-id=<00ab01d6449a$3a7aff80$af70fe80$@domain.com.br>
Jun 17 08:27:06 sedici postfix/qmgr[4325]: 06DBD360F42: from=<rodrigo@domain.com.br>, size=74924, nrcpt=2 (queue active)
Jun 17 08:27:06 sedici postfix/dkimmilter/smtpd[12020]: disconnect from localhost[127.0.0.1] ehlo=1 mail=1 rcpt=2 data=1 quit=1 commands=6
Jun 17 08:27:06 sedici postfix/smtp[26110]: AE426360EA2: to=<secretaria@domain2.com.br>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.46, delays=0.22/0/0/0.24, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10030): 250 2.0.0 Ok: queued as 06DBD360F42)
Jun 17 08:27:06 sedici postfix/smtp[26110]: AE426360EA2: to=<jair.junior@domain.com.br>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.46, delays=0.22/0/0/0.24, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10030): 250 2.0.0 Ok: queued as 06DBD360F42)
Jun 17 08:27:06 sedici postfix/qmgr[4325]: AE426360EA2: removed

[DualBoot]

the log you have posted does not show anything relevant.
/opt/zimbra/log/mailbox.log is the file to investigate.

Regards,

[Yves Pires]

the log you have posted does not show anything relevant.
/opt/zimbra/log/mailbox.log is the file to investigate.

Regards,

ah, logs shows customer is using IMAP, need to whitelist domain in his microsoft outlook

Thank you

[king0770]

If a message was move into the junk folder, check /opt/zimbra/log/mailbox.log.

I've seen instances in the past where legit messages were moved into the /Junk folder by the mobile device; reasons unknown.

[Yves Pires]

I've seen instances in the past where legit messages were moved into the /Junk folder by the mobile device; reasons unknown.

yep, it was his mobile device marking as SPAM

thanks