Spam mails to catch-all alias do not appear in Junk folder

uncre4tive

Hello,

I only use my mailcow server with one mailbox per domain.
I created a catch-all alias for the mailbox so that I could use different email addresses for each registration, for example amazon@mydomain.tld, facebook@mydomain.tld, etc.

Regular emails arrive correctly. However, as soon as Rspamd marks emails as spam, the emails are not delivered to me.

Here is an example from today:
Initial situation:
Sender: service@smilodox.com
Aliases via catchall: smilodox@mydomain.tld
Forwarding to: tg@mydomain.tld

Rspamd Log:

Postfix Log:

Dovecot Log:

According to Dovecot, the email was moved to ‘Junk’. So far, everything is correct.
However, there is nothing in the ‘Junk’ folder of the tg@mydomain.tld mailbox. I have no idea where this email ended up.

Why is that?
Have I set something up incorrectly?

Deactivating Rspamd for the domain is not an option for me.

ETNyx

Every time, one of my users tell me this fairy tale about disappearing mails it’s 100% client’s fault not MC. About 50% of times the culprit is Apple inc. Are you using any Apple device? They are deleting your mails they think as spam without asking.

What to do on MC side? Make your log more verbose a check if your messages are deleted without your knowledge. Edit your data/conf/dovecot/extra.conf and add

plugin {
  mail_log_events = delete undelete expunge save copy mailbox_create mailbox_delete mailbox_rename
  mail_log_fields = uid box msgid size from subject
  mail_log_cached_only = no
}

Also check Dovecot docs what you just post into your config and if it fits your needs,…

Down & up your stack to load new config and you should see logs like this dovecot: imap(email@address)<NO><ID>: delete: box=Folder, uid=NO, msgid=<ID>, size=SIZE, from=from@domain, subject=Subject example if IMAP delete command made,…

uncre4tive

ETNyx
Thank you very much for your advice.

I adjusted the Dovecat configuration as you suggested. After that, I received another spam email, which according to the logs was copied to the ‘Junk’ folder.
However, I couldn’t find any entry indicating that the email had been deleted. Except for another normal email that I deleted myself.

But yes, I do use Apple devices.
I’ll remove the email account from all Apple devices. Maybe that will narrow down the troubleshooting.

ETNyx

uncre4tive I adjusted the Dovecat configuration as you suggested. After that, I received another spam email, which according to the logs was copied to the ‘Junk’ folder.

In the copy log event do you see correct address, i expect you are expecting the forwarding one?

uncre4tive However, I couldn’t find any entry indicating that the email had been deleted. Except for another normal email that I deleted myself.

Strange if message was delete by MUA it should be recorded there,…