Hello,
I have in my .forward file
if $h_X-Spam-Score: CONTAINS "++++++" then save Maildir/.SPAM/
logwrite "$tod_log $message_id contains spam"
finish
elif [...]
elif "$original_local_part:" is "web" or "$original_local_part:" is
"impressum" then save Maildir/.AA-bokomoko.public/
[...]
else
save Maildir/
endif
and I see that the SPAM mail with the header below made it into the else
branch:
Return-Path: <byoqnwz@???>
Envelope-to: impressum@???
Delivery-date: Wed, 28 Oct 2020 07:28:23 +0100
Received: from [188.242.133.111] (helo=XpkAYBMmUsGCS6q) by contabo.bokomoko.de
with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-
from <byoqnwz@???>) id 1kXewW-0003V5-Dj for impressum@???; Wed,
28 Oct 2020 07:28:22 +0100
Content-Type: text/html; charset="windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Payment status: successful.
From: help <byoqnwz@???>
To: jlkpjj <nclq@???>
Date: Wed, 28 Oct 2020 13:28:17 +0700
Message-ID: <89984981283663.46.95121@fltfahgkhcmy>
List-Id: 9741814
X-Member-Id: 167226
X-Postmaster-Msgtype: 7757
Precedence: bulk
Feedback-Id: 9741814:167226:E:7757
X-Dc-Mid: 659-143625-548-976-93563849-1487751311883@???
X-Mailru-Msgtype: 7757
Reply-To: Digital Contact <byoqnwz@???>
MIME-Version: 1.0
X-Campaign-Id: 9741814
Sender: byoqnwz@???
In the mainlog I found
2020-10-28 07:28:23 1kXewW-0003V5-Dj <= byoqnwz@??? H=(XpkAYBMmUsGCS6q)
[188.242.133.111] P=esmtps X=TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256 CV=no
S=5272 id=89984981283663.46.95121@fltfahgkhcmy
2020-10-28 07:28:23 1kXewW-0003V5-Dj => /home/rd/Maildir/
([localuser]@bokomoko.de) <impressum@???> R=userforward
T=address_directory
2020-10-28 07:28:23 1kXewW-0003V5-Dj Completed
Any hint or idea is welcome. Is there a better way to filter on the Envelope-
to: field?
Many thanks
Rainer
--
Rainer Dorsch
http://bokomoko.de/
