Spam filter on mail alias it does not work

Raise/discuss any potential issues with MailEnable for consideration in project issue register.
Post Reply
gianmarcob
Posts: 4
Joined: Tue Oct 03, 2023 1:04 pm

Spam filter on mail alias it does not work

Post by gianmarcob »

Hello,
I have mail info@xxxxx.it with alias amministrazione@xxxxx.it.
From the webmail I set it up Spam Filter (High) to delete message.
The filter only works on the info@xxxxx.it mailbox, the same email received on amministrazione@xxxxx.it is not deleted.
The header of both emails contains the X-ME-Spam: High (140) flag.

Any suggestions?
Thank you

Gianmarco

Admin
Site Admin
Posts: 1097
Joined: Mon Jun 10, 2002 6:31 pm
Location: Melbourne, Victoria, Australia

Re: Spam filter on mail alias it does not work

Post by Admin »

It does not matter what the recipient address is, the action is on the mailbox, for all messages arriving (it does not look at the recipient). So if it goes to the inbox then it could be due to whitelisting. The postoffice connector Debug log may contain more details of what is happening.

gianmarcob
Posts: 4
Joined: Tue Oct 03, 2023 1:04 pm

Re: Spam filter on mail alias it does not work

Post by gianmarcob »

Thi is Debug log:

SMTP DEBUG:
10/13/23 06:32:56 ME-I0101: [2232] Local Delivery: Address ([SMTP:info@xxxx.it]) is local.
10/13/23 06:32:56 ME-I0101: [2708] Local Delivery: Address ([SMTP:assistenza@xxxx.it]) is local.
10/13/23 06:32:56 ME-I0101: [2696] Local Delivery: Address ([SMTP:amministrazione@xxxx.it]) is local.
10/13/23 06:32:57 ME-E0113: [2708] Message marked as spam: (163.123.143.31) was found in DNSBL Spamcop.
10/13/23 06:32:57 ME-E0113: [2232] Message marked as spam: (163.123.143.31) was found in DNSBL Spamcop.
10/13/23 06:32:57 ME-E0113: [2696] Message marked as spam: (163.123.143.31) was found in DNSBL Spamcop.
10/13/23 06:32:57 ME-E0114: [2696] Recipient Denied: (163.123.143.31) has no PTR. Result 9003.
10/13/23 06:32:57 ME-E0114: [2232] Recipient Denied: (163.123.143.31) has no PTR. Result 9003.
10/13/23 06:32:57 ME-E0114: [2708] Recipient Denied: (163.123.143.31) has no PTR. Result 9003.
10/13/23 06:32:57 ME-I0149: [2696] 5D0834399BB24EC9952A3AB16B9AB3F0.MAI was received successfully and delivery thread was initiated
10/13/23 06:32:57 ME-I0149: [2708] EB9567F1903A473C9BEECCFD6CDF4527.MAI was received successfully and delivery thread was initiated
10/13/23 06:32:57 ME-I0149: [2232] 9DB258A1D669453F9390E11E013925C3.MAI was received successfully and delivery thread was initiated

MTA FILTER:
10/13/23 06:32:58 Executed EB9567F1903A473C9BEECCFD6CDF4527.MAI SMTP [System Spam Filter] ADD_HEADER [SMTP:mailer-daemon@host2.i4dots.com] 163.123.143.31 High (110) Undeliverable: Outgoing mail failed
10/13/23 06:32:58 Executed 9DB258A1D669453F9390E11E013925C3.MAI SMTP [System Spam Filter] ADD_HEADER [SMTP:mailer-daemon@host2.i4dots.com] 163.123.143.31 High (110) Undeliverable: Outgoing mail failed
10/13/23 06:32:59 Executed 5D0834399BB24EC9952A3AB16B9AB3F0.MAI SMTP [System Spam Filter] ADD_HEADER [SMTP:mailer-daemon@host2.i4dots.com] 163.123.143.31 High (110) Undeliverable: Outgoing mail failed
10/13/23 06:33:01 Executed 07D65A411F2246A9A5D42352BA335360.MAI SF [System Spam Filter] ADD_HEADER [SMTP:assistenza@xxxx.it] 163.123.143.31 High (130) Undeliverable: Outgoing mail failed
10/13/23 06:33:01 Executed 73B2FEDFAE8643BF934814BA67248DE6.MAI SF [System Spam Filter] ADD_HEADER [SMTP:info@xxxx.it] 163.123.143.31 High (130) Undeliverable: Outgoing mail failed
10/13/23 06:33:02 Executed FD5168E550AD4FB7A9B342ACCAE70BC7.MAI SF [System Spam Filter] ADD_HEADER [SMTP:info@xxxx.it] 163.123.143.31 High (130) Undeliverable: Outgoing mail failed


MTA DEBUG:
10/13/23 06:32:57 Processing file 5D0834399BB24EC9952A3AB16B9AB3F0.MAI from queue SMTP
10/13/23 06:32:57 ME-MTA-INFO : Routing message (5D0834399BB24EC9952A3AB16B9AB3F0.MAI) from (SMTP) to 1 recipient(s).
10/13/23 06:32:57 Processing file 9DB258A1D669453F9390E11E013925C3.MAI from queue SMTP
10/13/23 06:32:57 ME-MTA-INFO : Routing message (9DB258A1D669453F9390E11E013925C3.MAI) from (SMTP) to 1 recipient(s).
10/13/23 06:32:57 Processing file EB9567F1903A473C9BEECCFD6CDF4527.MAI from queue SMTP
10/13/23 06:32:57 ME-MTA-INFO : Routing message (EB9567F1903A473C9BEECCFD6CDF4527.MAI) from (SMTP) to 1 recipient(s).
10/13/23 06:32:58 ME-MTA-ROUTE [EB9567F1903A473C9BEECCFD6CDF4527.MAI] from [SMTP] Connector queued to [SF] Connector as [E97262A0D62A46C4A7206FFDFE3D59E9.MAI]
10/13/23 06:32:58 ME-MTA-ROUTE [9DB258A1D669453F9390E11E013925C3.MAI] from [SMTP] Connector queued to [SF] Connector as [4E892BD7C9FF4133B58D52EAE6FF3163.MAI]
10/13/23 06:32:59 ME-MTA-ROUTE [5D0834399BB24EC9952A3AB16B9AB3F0.MAI] from [SMTP] Connector queued to [SF] Connector as [B6672542911949A69D4FA3C64D84305B.MAI]
10/13/23 06:33:00 Processing file 07D65A411F2246A9A5D42352BA335360.MAI from queue SF
10/13/23 06:33:00 ME-MTA-INFO : Routing message (07D65A411F2246A9A5D42352BA335360.MAI) from (SF) to 2 recipient(s).
10/13/23 06:33:00 Processing file 73B2FEDFAE8643BF934814BA67248DE6.MAI from queue SF
10/13/23 06:33:00 ME-MTA-INFO : Routing message (73B2FEDFAE8643BF934814BA67248DE6.MAI) from (SF) to 2 recipient(s).
10/13/23 06:33:00 Processing file FD5168E550AD4FB7A9B342ACCAE70BC7.MAI from queue SF
10/13/23 06:33:00 ME-MTA-INFO : Routing message (FD5168E550AD4FB7A9B342ACCAE70BC7.MAI) from (SF) to 2 recipient(s).
10/13/23 06:33:01 ME-MTA-ROUTE [07D65A411F2246A9A5D42352BA335360.MAI] from [SF] Connector queued to [SF] Connector as [04A54E222B614FF09DFA8F07932A3857.MAI]
10/13/23 06:33:01 ME-MTA-ROUTE [73B2FEDFAE8643BF934814BA67248DE6.MAI] from [SF] Connector queued to [SF] Connector as [1C99D9B732B5413C83342AC2F11F982D.MAI]
10/13/23 06:33:02 ME-MTA-ROUTE [FD5168E550AD4FB7A9B342ACCAE70BC7.MAI] from [SF] Connector queued to [SF] Connector as [EFFD5460EFE94F1094B7B76DE1E87C91.MAI]

The mail to info@xxxxx.it and assistenza@xxxx.it have been deleted successfully, amministrazione@xxxx.it was delivered with header X-ME-Spam: High (130)

Admin
Site Admin
Posts: 1097
Joined: Mon Jun 10, 2002 6:31 pm
Location: Melbourne, Victoria, Australia

Re: Spam filter on mail alias it does not work

Post by Admin »

It was the postoffice connector log which is needed, since that is what runs the mailbox filters to act on the emails. Check to see if they have indication of what is happening.

gianmarcob
Posts: 4
Joined: Tue Oct 03, 2023 1:04 pm

Re: Spam filter on mail alias it does not work

Post by gianmarcob »

Hi,
this is the scenario

amministrazione@xxxx.it is alias of info@xxxxx.it

all emails intended for info@xxxx.it redirect to gianmarcob@xxxx.it and paolop@xxxx.it (without option keep copy of message in mailbox)

gianmarcob and paolo they still receive the email even if marked as high spam

SMTP
10/25/23 14:16:19 SMTP-IN 12841229DC4B42648E71835693FB91CA.MAI 1908 194.53.54.199 220 mx-srv4.hostwise.it - Softwise srl SMTP Hosting 53 0
10/25/23 14:16:19 SMTP-IN 12841229DC4B42648E71835693FB91CA.MAI 1908 194.53.54.199 EHLO EHLO mail.maztiones.free.hr 250-mx-srv4.hostwise.it [194.53.54.199], this server offers 8 extensions 255 29
10/25/23 14:16:19 SMTP-IN 12841229DC4B42648E71835693FB91CA.MAI 1908 194.53.54.199 MAIL MAIL FROM:<upqipdv@maztiones.free.hr> 250 Requested mail action okay, completed 43 39
10/25/23 14:16:20 SMTP-IN 12841229DC4B42648E71835693FB91CA.MAI 1908 194.53.54.199 RCPT RCPT TO:<amministrazione@xxxxx.it> ORCPT=rfc822;amministrazione@xxxxx.it 250 Requested mail action okay, completed 43 80
10/25/23 14:16:20 SMTP-IN 12841229DC4B42648E71835693FB91CA.MAI 1908 194.53.54.199 DATA DATA 354 Start mail input; end with <CRLF>.<CRLF> 46 6
10/25/23 14:16:20 SMTP-IN 12841229DC4B42648E71835693FB91CA.MAI 1908 194.53.54.199 DATE 250 Requested mail action okay, completed 43 167842

MTA FILTER
10/25/23 14:16:26 Executed 12841229DC4B42648E71835693FB91CA.MAI SMTP [System Spam Filter] ADD_HEADER [SMTP:upqipdv@maztiones.free.hr] 194.53.54.199 High (80) Nemanex - Normalizza il funzionamento del sistema digestivo
10/25/23 14:16:33 Executed 719D365BC76940F9873FD1A3F7E4DF76.MAI SF [System Spam Filter] ADD_HEADER [SMTP:info@xxxx.it] 194.53.54.199 High (100) Nemanex - Normalizza il funzionamento del sistema digestivo

MTA DEBUG
10/25/23 14:16:24 Processing file 9310A588AB414122BE06D2216CF26376.MAI from queue SMTP
10/25/23 14:16:24 ME-MTA-INFO : Routing message (9310A588AB414122BE06D2216CF26376.MAI) from (SMTP) to 3 recipient(s).
10/25/23 14:16:24 ME-MTA-ROUTE [9310A588AB414122BE06D2216CF26376.MAI] from [SMTP] Connector queued to [SMTP] Connector as [E40348AC6C90402BA8E30114A2BC4672.MAI]
10/25/23 14:16:24 ME-MTA-ROUTE [9310A588AB414122BE06D2216CF26376.MAI] from [SMTP] Connector queued to [SF] Connector as [E9FA8278A8BD4507AC7DEC93079BBF54.MAI]
10/25/23 14:16:26 ME-MTA-ROUTE [12841229DC4B42648E71835693FB91CA.MAI] from [SMTP] Connector queued to [SF] Connector as [E3C8268BAF4B4C2C8B0CF8E46D7EDB3C.MAI]

POC
10/25/23 14:16:34 Executed C38016B1E43846FB8B2D9C3E1C1FFEBF.MAI SF Amministrazione MOVE xxxx.it [SMTP:info@xxxx.it] 194.53.54.199 CRITERIA=FROM, MATCH=FALSE|CRITERIA=TO, DATA=<MF-R>amministrazione@xxxx.it</MF-R> Nemanex - Normalizza il funzionamento del sistema digestivo
10/25/23 14:16:34 [C38016B1E43846FB8B2D9C3E1C1FFEBF.MAI] Message delivery processing to PO=xxxx.it MBX=gianmarcob was interupted because a filter prevented delivery of the original message.
10/25/23 14:16:34 Executed C38016B1E43846FB8B2D9C3E1C1FFEBF.MAI SF AMMINISTRAZIONE MOVE xxxx.it [SMTP:info@xxxx.it] 194.53.54.199 CRITERIA=TO, DATA=<MF-R>amministrazione@xxxx.it</MF-R> Nemanex - Normalizza il funzionamento del sistema digestivo
10/25/23 14:16:34 [C38016B1E43846FB8B2D9C3E1C1FFEBF.MAI] Message delivery processing to PO=xxxx.it MBX=paolop was interupted because a filter prevented delivery of the original message.

Mail Header:

Received: with MailEnable Postoffice Connector; Wed, 25 Oct 2023 14:16:27 +0200
Received-SPF: pass (mx-srv4.hostwise.it: domain of maztiones.free.hr designates 194.53.54.199 as permitted sender)
client-ip=194.53.54.199
Received: from mail.maztiones.free.hr ([194.53.54.199]) by mx-srv4.hostwise.it with
MailEnable ESMTP; Wed, 25 Oct 2023 14:16:20 +0200
Received: from maztiones.free.hr (unknown [91.215.169.234])
by mail.maztiones.free.hr (Postfix) with ESMTPA id F2BDB24FB7B;
Wed, 25 Oct 2023 15:16:12 +0300 (EEST)
Message-ID: <1561803712573838678732071606058745007215@maztiones.free.hr>
From: "Un potente impatto sui parassiti" <upqipdv@maztiones.free.hr>
To: <amministrazione@xxxx.it>
Subject: Nemanex - Normalizza il funzionamento del sistema digestivo
Date: Wed, 25 Oct 2023 15:16:15 +0300
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_000_0006_01DA0755.2FA184E0"
X-Envelope-Sender: upqipdv@maztiones.free.hr
X-ME-Bayesian: 0.000000
X-ME-Spam: High (100)

Admin
Site Admin
Posts: 1097
Joined: Mon Jun 10, 2002 6:31 pm
Location: Melbourne, Victoria, Australia

Re: Spam filter on mail alias it does not work

Post by Admin »

Thanks for the further logs. The problem is that redirection is done before the spam action is done. You can see the order of processing at:

https://www.mailenable.com/kb/content/article.asp?ID=ME020716

I think the only workaround would be to check for the header in a postoffice level filter (if using Enterprise version) to mark it as junk, then use the option below to avoid them getting redirected:

https://www.mailenable.com/kb/content/article.asp?ID=ME020480

There is not a way to do this per mailbox though.

gianmarcob
Posts: 4
Joined: Tue Oct 03, 2023 1:04 pm

Re: Spam filter on mail alias it does not work

Post by gianmarcob »

Hi,
this registry setting is already present, the strange thing is that if the email is received on info@xxxx-it it works correctly, if it is received on the alias amministrazionezione@xxxx.it it doesn't work.

Post Reply