Hello, I have in my .forward file
if $h_X-Spam-Score: CONTAINS "++++++" then save Maildir/.SPAM/ logwrite "$tod_log $message_id contains spam" finish elif [...] elif "$original_local_part:" is "web" or "$original_local_part:" is "impressum" then save Maildir/.AA-bokomoko.public/ [...] else save Maildir/ endif and I see that the SPAM mail with the header below made it into the else branch: Return-Path: <[email protected]> Envelope-to: [email protected] Delivery-date: Wed, 28 Oct 2020 07:28:23 +0100 Received: from [188.242.133.111] (helo=XpkAYBMmUsGCS6q) by contabo.bokomoko.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope- from <[email protected]>) id 1kXewW-0003V5-Dj for [email protected]; Wed, 28 Oct 2020 07:28:22 +0100 Content-Type: text/html; charset="windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Payment status: successful. From: help <[email protected]> To: jlkpjj <[email protected]> Date: Wed, 28 Oct 2020 13:28:17 +0700 Message-ID: <89984981283663.46.95121@fltfahgkhcmy> List-Id: 9741814 X-Member-Id: 167226 X-Postmaster-Msgtype: 7757 Precedence: bulk Feedback-Id: 9741814:167226:E:7757 X-Dc-Mid: [email protected] X-Mailru-Msgtype: 7757 Reply-To: Digital Contact <[email protected]> MIME-Version: 1.0 X-Campaign-Id: 9741814 Sender: [email protected] In the mainlog I found 2020-10-28 07:28:23 1kXewW-0003V5-Dj <= [email protected] H=(XpkAYBMmUsGCS6q) [188.242.133.111] P=esmtps X=TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256 CV=no S=5272 id=89984981283663.46.95121@fltfahgkhcmy 2020-10-28 07:28:23 1kXewW-0003V5-Dj => /home/rd/Maildir/ ([localuser]@bokomoko.de) <[email protected]> R=userforward T=address_directory 2020-10-28 07:28:23 1kXewW-0003V5-Dj Completed Any hint or idea is welcome. Is there a better way to filter on the Envelope- to: field? Many thanks Rainer -- Rainer Dorsch http://bokomoko.de/ -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
