Is it the second email sample that does not work? If so the To: on that
one is walter@waldinet.local and I don't see any rules for
walter@waldinet.local. Also, where does the mail that doesn't work end up?
On 04/04/2017 03:00 AM, Walter H. via Info-cyrus wrote:
Hello,
I've found a Sieve Tester, where everything works as I expect
https://www.fastmail.com/cgi-bin/sievetest.pl
but Cyrus Sieve doesn't
here the Sieve-Script
<BEGIN SCRIPT>
# Sieve filter
require ["fileinto", "relational"];
if not exists ["from"]
{
discard;
}
elsif allof (address :all :is "from" "squid@xxxxxxxx.local",
address :all :is "to" "walter@my.local")
{
if header :matches "subject" "[proxy] Video-URL (*) detected"
{
fileinto "INBOX._Info.hbbtvVideoURLs";
}
elsif header :matches "subject" "[proxy] File-URL (*) detected"
{
fileinto "INBOX._Info.ftpFileURLs";
}
else
{
fileinto "INBOX._Info";
}
}
elsif allof (address :all :is "from" "clamav@xxxxxxx.local",
address :all :is "to" "walter@my.local")
{
if header :matches "subject" "[mail] Virus detected in E-mail"
{
fileinto "INBOX._Alert";
}
}
elsif header :matches "list-id" "*<centos.centos.org>"
{
fileinto "INBOX._MailLists._CENTOS";
}
elsif header :is "precedence" "bulk"
{
fileinto "INBOX.Trash";
}
else
{
keep;
}
</END SCRIPT>
and this is the Mail
<BEGIN MAIL>
Return-Path: <squid@xxxxxxxx.local>
Received: from storage.mail ([unix socket])
by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
Mon, 03 Apr 2017 21:27:35 +0200
X-Sieve: CMU Sieve 2.3
Received: from proxy.host by storage.mail (Postfix) with ESMTP id 19B2C79235
Received: by proxy.host (Postfix, userid 23) id EB81D2B0BE
Date: Mon, 03 Apr 2017 21:27:34 +0200
To: walter@my.local
Subject: [proxy] File-URL (PC) detected
User-Agent: Heirloom mailx 12.4 7/29/08
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <20170403192734.EB81D2B0BE@xxxxxxxx.local>
From: squid@xxxxxxxx.local (Squid)
The following information came from the Squid proxy virtual machine.
--[ Data submitted ]-------------------------------------------------------
File-URL: ftp://ftp.adobe.com/lbtest.txt
</END MAIL>
this Mail is sorted correct by the sieve script
<BEGIN MAIL>
Return-Path: <clamav@xxxxxxx.local>
Received: from storage.mail ([unix socket])
by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
Sun, 05 Feb 2017 19:14:15 +0100
X-Sieve: CMU Sieve 2.3
Received: from filter.mail by storage.mail (Postfix) with ESMTP id 5634078BA8
Received: by filter.mail (Postfix) id 48F198E9
Delivered-To: root@xxxxxxxxxxx
Received: from filter.mail [local] by filter.mail (Postfix) with ESMTP id
35E838E8
Received: by filter.mail (Postfix, userid 496) id 2A20D8E9
From: ClamAV <clamav@xxxxxxx.local>
To: walter@waldinet.local
Subject: [mail] Virus detected in E-mail
Message-Id: <20170205181415.2A20D8E9@xxxxxxx.local>
Date: Sun, 5 Feb 2017 19:14:15 +0100 (CET)
X-AV-Scanned: ClamAV using ClamSMTP (filter.mail)
The following information came from the Mail filter virtual machine.
--[ Data submitted ]-------------------------------------------------------
Virus name: Heuristics.Phishing.Email.SpoofedDomain
Sender: RTE+NE-null-b1cb1A01203481E6ZUBGCSE8TI@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Quarantined to: /var/lib/clamd.clamsmtp/virus.XeKpYL
--[ E-Mail header ]--------------------------------------------------------
...
</END MAIL>
can someone give me a hint, what is wrong,
Thanks,
Walter
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
begin:vcard
fn:Patrick Boutilier
n:Boutilier;Patrick
org:;Nova Scotia Department of Education
adr:;;2021 Brunswick Street;Halifax;NS;B3K 2Y5;Canada
email;internet:boutilpj@xxxxxxxxxxx
title:WAN Communications Specialist
tel;work:902-424-6800
tel;fax:902-424-0874
version:2.1
end:vcard
----
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
