Hello, Oh, didn't change waldinet.local to my.local I found out why I had problems, the 2nd worked, the first not ... in /var/lib/imap/sieve there I had 2 folders: global and w/walter and both contained a sieve script, the one under w/walter was older and didn't handle the 2nd mail, and I guess that the other in global didn't come to work ... I did the following service cyrus-imapd stop rm -rf w/walter mv global w/walter service cyrus-imapd start and this solved it, but I don't know why there were 2 sieve scripts - one global and for user walter (me) when I update my sieve script I do the following: sieveshell --authname=cyrus --user=walter localhost and there put filter.script quite strange how this happened; Greetings, Walter On Tue, April 4, 2017 12:15, Patrick Boutilier wrote: > Is it the second email sample that does not work? If so the To: on that > one is walter@waldinet.local and I don't see any rules for > walter@waldinet.local. Also, where does the mail that doesn't work end up? > > > On 04/04/2017 03:00 AM, Walter H. via Info-cyrus wrote: >> Hello, >> >> I've found a Sieve Tester, where everything works as I expect >> >> https://www.fastmail.com/cgi-bin/sievetest.pl >> >> but Cyrus Sieve doesn't >> >> here the Sieve-Script >> >> <BEGIN SCRIPT> >> # Sieve filter >> >> require ["fileinto", "relational"]; >> >> if not exists ["from"] >> { >> discard; >> } >> elsif allof (address :all :is "from" "squid@xxxxxxxx.local", >> address :all :is "to" "walter@my.local") >> { >> if header :matches "subject" "[proxy] Video-URL (*) detected" >> { >> fileinto "INBOX._Info.hbbtvVideoURLs"; >> } >> elsif header :matches "subject" "[proxy] File-URL (*) detected" >> { >> fileinto "INBOX._Info.ftpFileURLs"; >> } >> else >> { >> fileinto "INBOX._Info"; >> } >> } >> elsif allof (address :all :is "from" "clamav@xxxxxxx.local", >> address :all :is "to" "walter@my.local") >> { >> if header :matches "subject" "[mail] Virus detected in E-mail" >> { >> fileinto "INBOX._Alert"; >> } >> } >> elsif header :matches "list-id" "*<centos.centos.org>" >> { >> fileinto "INBOX._MailLists._CENTOS"; >> } >> elsif header :is "precedence" "bulk" >> { >> fileinto "INBOX.Trash"; >> } >> else >> { >> keep; >> } >> </END SCRIPT> >> >> and this is the Mail >> >> <BEGIN MAIL> >> Return-Path: <squid@xxxxxxxx.local> >> Received: from storage.mail ([unix socket]) >> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with >> LMTPA; >> Mon, 03 Apr 2017 21:27:35 +0200 >> X-Sieve: CMU Sieve 2.3 >> Received: from proxy.host by storage.mail (Postfix) with ESMTP id >> 19B2C79235 >> Received: by proxy.host (Postfix, userid 23) id EB81D2B0BE >> Date: Mon, 03 Apr 2017 21:27:34 +0200 >> To: walter@my.local >> Subject: [proxy] File-URL (PC) detected >> User-Agent: Heirloom mailx 12.4 7/29/08 >> MIME-Version: 1.0 >> Content-Type: text/plain; charset=us-ascii >> Content-Transfer-Encoding: 7bit >> Message-Id: <20170403192734.EB81D2B0BE@xxxxxxxx.local> >> From: squid@xxxxxxxx.local (Squid) >> >> The following information came from the Squid proxy virtual machine. >> >> --[ Data submitted >> ]------------------------------------------------------- >> >> File-URL: ftp://ftp.adobe.com/lbtest.txt >> >> </END MAIL> >> >> this Mail is sorted correct by the sieve script >> >> <BEGIN MAIL> >> Return-Path: <clamav@xxxxxxx.local> >> Received: from storage.mail ([unix socket]) >> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA; >> Sun, 05 Feb 2017 19:14:15 +0100 >> X-Sieve: CMU Sieve 2.3 >> Received: from filter.mail by storage.mail (Postfix) with ESMTP id >> 5634078BA8 >> Received: by filter.mail (Postfix) id 48F198E9 >> Delivered-To: root@xxxxxxxxxxx >> Received: from filter.mail [local] by filter.mail (Postfix) with ESMTP >> id >> 35E838E8 >> Received: by filter.mail (Postfix, userid 496) id 2A20D8E9 >> From: ClamAV <clamav@xxxxxxx.local> >> To: walter@waldinet.local >> Subject: [mail] Virus detected in E-mail >> Message-Id: <20170205181415.2A20D8E9@xxxxxxx.local> >> Date: Sun, 5 Feb 2017 19:14:15 +0100 (CET) >> X-AV-Scanned: ClamAV using ClamSMTP (filter.mail) >> >> The following information came from the Mail filter virtual machine. >> >> --[ Data submitted >> ]------------------------------------------------------- >> >> Virus name: Heuristics.Phishing.Email.SpoofedDomain >> Sender: >> RTE+NE-null-b1cb1A01203481E6ZUBGCSE8TI@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx >> >> Quarantined to: /var/lib/clamd.clamsmtp/virus.XeKpYL >> >> --[ E-Mail header >> ]-------------------------------------------------------- >> >> ... >> >> </END MAIL> >> >> can someone give me a hint, what is wrong, >> >> Thanks, >> Walter >> >> ---- >> Cyrus Home Page: http://www.cyrusimap.org/ >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >> To Unsubscribe: >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus >> > > ---- > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
