Re: strange sieve problem
Hello,
Oh, didn't change waldinet.local to my.local
I found out why I had problems, the 2nd worked, the first not ...
in
/var/lib/imap/sieve
there I had 2 folders:
global and w/walter
and both contained a sieve script, the one under w/walter was older and
didn't handle the 2nd mail, and I guess that the other in global didn't
come to work ...
I did the following
service cyrus-imapd stop
rm -rf w/walter
mv global w/walter
service cyrus-imapd start
and this solved it, but I don't know why there were 2 sieve scripts - one
global and for user walter (me)
when I update my sieve script I do the following:
sieveshell --authname=cyrus --user=walter localhost
and there put filter.script
quite strange how this happened;
Greetings,
Walter
On Tue, April 4, 2017 12:15, Patrick Boutilier wrote:
> Is it the second email sample that does not work? If so the To: on that
> one is walter@waldinet.local and I don't see any rules for
> walter@waldinet.local. Also, where does the mail that doesn't work end up?
>
>
> On 04/04/2017 03:00 AM, Walter H. via Info-cyrus wrote:
>> Hello,
>>
>> I've found a Sieve Tester, where everything works as I expect
>>
>> https://www.fastmail.com/cgi-bin/sievetest.pl
>>
>> but Cyrus Sieve doesn't
>>
>> here the Sieve-Script
>>
>>
>> # Sieve filter
>>
>> require ["fileinto", "relational"];
>>
>> if not exists ["from"]
>> {
>> discard;
>> }
>> elsif allof (address :all :is "from" "sq...@proxy.my.local",
>> address :all :is "to" "walter@my.local")
>> {
>> if header :matches "subject" "[proxy] Video-URL (*) detected"
>> {
>> fileinto "INBOX._Info.hbbtvVideoURLs";
>> }
>> elsif header :matches "subject" "[proxy] File-URL (*) detected"
>> {
>> fileinto "INBOX._Info.ftpFileURLs";
>> }
>> else
>> {
>> fileinto "INBOX._Info";
>> }
>> }
>> elsif allof (address :all :is "from" "cla...@mail.my.local",
>> address :all :is "to" "walter@my.local")
>> {
>> if header :matches "subject" "[mail] Virus detected in E-mail"
>> {
>> fileinto "INBOX._Alert";
>> }
>> }
>> elsif header :matches "list-id" "*"
>> {
>> fileinto "INBOX._MailLists._CENTOS";
>> }
>> elsif header :is "precedence" "bulk"
>> {
>> fileinto "INBOX.Trash";
>> }
>> else
>> {
>> keep;
>> }
>>
>>
>> and this is the Mail
>>
>>
>> Return-Path:
>> Received: from storage.mail ([unix socket])
>> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with
>> LMTPA;
>> Mon, 03 Apr 2017 21:27:35 +0200
>> X-Sieve: CMU Sieve 2.3
>> Received: from proxy.host by storage.mail (Postfix) with ESMTP id
>> 19B2C79235
>> Received: by proxy.host (Postfix, userid 23) id EB81D2B0BE
>> Date: Mon, 03 Apr 2017 21:27:34 +0200
>> To: walter@my.local
>> Subject: [proxy] File-URL (PC) detected
>> User-Agent: Heirloom mailx 12.4 7/29/08
>> MIME-Version: 1.0
>> Content-Type: text/plain; charset=us-ascii
>> Content-Transfer-Encoding: 7bit
>> Message-Id: <20170403192734.eb81d2b...@proxy.my.local>
>> From: sq...@proxy.my.local (Squid)
>>
>> The following information came from the Squid proxy virtual machine.
>>
>> --[ Data submitted
>> ]---
>>
>> File-URL: ftp://ftp.adobe.com/lbtest.txt
>>
>>
>>
>> this Mail is sorted correct by the sieve script
>>
>>
>> Return-Path:
>> Received: from storage.mail ([unix socket])
>> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
>> Sun, 05 Feb 2017 19:14:15 +0100
>> X-Sieve: CMU Sieve 2.3
>> Received: from filter.mail by storage.mail (Postfix) with ESMTP id
>> 5634078BA8
>> Received: by filter.mail (Postfix) id 48F198E9
>> Delivered-To: r...@filter.mail
>> Received: from filter.mail [local] by filter.mail (Postfix) with ESMTP
>> id
>> 35E838E8
>> Received: by filter.mail (Postfix, userid 496) id 2A20D8E9
>> From: ClamAV
>> To: walter@waldinet.local
>> Subject: [mail] Virus detected in E-mail
>> Message-Id: <20170205181415.2a20d...@mail.my.local>
>> Date: Sun, 5 Feb 2017 19:14:15 +0100 (CET)
>> X-AV-Scanned: ClamAV using ClamSMTP (filter.mail)
>>
>> The following information came from the Mail filter virtual machine.
>>
>> --[ Data submitted
>> ]---
>>
>> Virus name: Heuristics.Phishing.Email.SpoofedDomain
>> Sender:
>> rte+ne-null-b1cb1a01203481e6zubgcse...@sellernotifications.amazon.com
>>
>> Quarantined to: /var/lib/clamd.clamsmtp/virus.XeKpYL
>>
>> --[ E-Mail header
>> ]
>>
>> ...
>>
>>
>>
>> can someone give me a hint, what is wrong,
>>
>> Thanks,
>> Walter
>>
>>
>> Cyrus Home Page: http://www.cyrusimap.org/
>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
>> To Unsubscribe:
>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: strange sieve problem
Is it the second email sample that does not work? If so the To: on that
one is walter@waldinet.local and I don't see any rules for
walter@waldinet.local. Also, where does the mail that doesn't work end up?
On 04/04/2017 03:00 AM, Walter H. via Info-cyrus wrote:
Hello,
I've found a Sieve Tester, where everything works as I expect
https://www.fastmail.com/cgi-bin/sievetest.pl
but Cyrus Sieve doesn't
here the Sieve-Script
# Sieve filter
require ["fileinto", "relational"];
if not exists ["from"]
{
discard;
}
elsif allof (address :all :is "from" "sq...@proxy.my.local",
address :all :is "to" "walter@my.local")
{
if header :matches "subject" "[proxy] Video-URL (*) detected"
{
fileinto "INBOX._Info.hbbtvVideoURLs";
}
elsif header :matches "subject" "[proxy] File-URL (*) detected"
{
fileinto "INBOX._Info.ftpFileURLs";
}
else
{
fileinto "INBOX._Info";
}
}
elsif allof (address :all :is "from" "cla...@mail.my.local",
address :all :is "to" "walter@my.local")
{
if header :matches "subject" "[mail] Virus detected in E-mail"
{
fileinto "INBOX._Alert";
}
}
elsif header :matches "list-id" "*"
{
fileinto "INBOX._MailLists._CENTOS";
}
elsif header :is "precedence" "bulk"
{
fileinto "INBOX.Trash";
}
else
{
keep;
}
and this is the Mail
Return-Path:
Received: from storage.mail ([unix socket])
by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
Mon, 03 Apr 2017 21:27:35 +0200
X-Sieve: CMU Sieve 2.3
Received: from proxy.host by storage.mail (Postfix) with ESMTP id 19B2C79235
Received: by proxy.host (Postfix, userid 23) id EB81D2B0BE
Date: Mon, 03 Apr 2017 21:27:34 +0200
To: walter@my.local
Subject: [proxy] File-URL (PC) detected
User-Agent: Heirloom mailx 12.4 7/29/08
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <20170403192734.eb81d2b...@proxy.my.local>
From: sq...@proxy.my.local (Squid)
The following information came from the Squid proxy virtual machine.
--[ Data submitted ]---
File-URL: ftp://ftp.adobe.com/lbtest.txt
this Mail is sorted correct by the sieve script
Return-Path:
Received: from storage.mail ([unix socket])
by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
Sun, 05 Feb 2017 19:14:15 +0100
X-Sieve: CMU Sieve 2.3
Received: from filter.mail by storage.mail (Postfix) with ESMTP id 5634078BA8
Received: by filter.mail (Postfix) id 48F198E9
Delivered-To: r...@filter.mail
Received: from filter.mail [local] by filter.mail (Postfix) with ESMTP id
35E838E8
Received: by filter.mail (Postfix, userid 496) id 2A20D8E9
From: ClamAV
To: walter@waldinet.local
Subject: [mail] Virus detected in E-mail
Message-Id: <20170205181415.2a20d...@mail.my.local>
Date: Sun, 5 Feb 2017 19:14:15 +0100 (CET)
X-AV-Scanned: ClamAV using ClamSMTP (filter.mail)
The following information came from the Mail filter virtual machine.
--[ Data submitted ]---
Virus name: Heuristics.Phishing.Email.SpoofedDomain
Sender: rte+ne-null-b1cb1a01203481e6zubgcse...@sellernotifications.amazon.com
Quarantined to: /var/lib/clamd.clamsmtp/virus.XeKpYL
--[ E-Mail header ]
...
can someone give me a hint, what is wrong,
Thanks,
Walter
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
<>
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: strange sieve problem
On Tue, April 4, 2017 08:42, ellie timoney wrote: >> Received: from storage.mail ([unix socket]) >> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with >> LMTPA; >> Mon, 03 Apr 2017 21:27:35 +0200 >> X-Sieve: CMU Sieve 2.3 > > Wild guess, is your script using sieve features that are not available > in 2.3.16? can't imagine, because when you look at the samples below, you see, that one works and the other not, but why? and there is used the same feature inside the script for both ... > 2.3.16 was released in 2009. its the release that comes with CentOS 6 Thanks, Walter Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: strange sieve problem
> Received: from storage.mail ([unix socket])
> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with
> LMTPA;
> Mon, 03 Apr 2017 21:27:35 +0200
> X-Sieve: CMU Sieve 2.3
Wild guess, is your script using sieve features that are not available
in 2.3.16? 2.3.16 was released in 2009.
On Tue, Apr 4, 2017, at 04:00 PM, Walter H. via Info-cyrus wrote:
> Hello,
>
> I've found a Sieve Tester, where everything works as I expect
>
> https://www.fastmail.com/cgi-bin/sievetest.pl
>
> but Cyrus Sieve doesn't
>
> here the Sieve-Script
>
>
> # Sieve filter
>
> require ["fileinto", "relational"];
>
> if not exists ["from"]
> {
> discard;
> }
> elsif allof (address :all :is "from" "sq...@proxy.my.local",
> address :all :is "to" "walter@my.local")
> {
> if header :matches "subject" "[proxy] Video-URL (*) detected"
> {
> fileinto "INBOX._Info.hbbtvVideoURLs";
> }
> elsif header :matches "subject" "[proxy] File-URL (*) detected"
> {
> fileinto "INBOX._Info.ftpFileURLs";
> }
> else
> {
> fileinto "INBOX._Info";
> }
> }
> elsif allof (address :all :is "from" "cla...@mail.my.local",
> address :all :is "to" "walter@my.local")
> {
> if header :matches "subject" "[mail] Virus detected in E-mail"
> {
> fileinto "INBOX._Alert";
> }
> }
> elsif header :matches "list-id" "*"
> {
> fileinto "INBOX._MailLists._CENTOS";
> }
> elsif header :is "precedence" "bulk"
> {
> fileinto "INBOX.Trash";
> }
> else
> {
> keep;
> }
>
>
> and this is the Mail
>
>
> Return-Path:
> Received: from storage.mail ([unix socket])
> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with
> LMTPA;
> Mon, 03 Apr 2017 21:27:35 +0200
> X-Sieve: CMU Sieve 2.3
> Received: from proxy.host by storage.mail (Postfix) with ESMTP id
> 19B2C79235
> Received: by proxy.host (Postfix, userid 23) id EB81D2B0BE
> Date: Mon, 03 Apr 2017 21:27:34 +0200
> To: walter@my.local
> Subject: [proxy] File-URL (PC) detected
> User-Agent: Heirloom mailx 12.4 7/29/08
> MIME-Version: 1.0
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
> Message-Id: <20170403192734.eb81d2b...@proxy.my.local>
> From: sq...@proxy.my.local (Squid)
>
> The following information came from the Squid proxy virtual machine.
>
> --[ Data submitted
> ]---
>
> File-URL: ftp://ftp.adobe.com/lbtest.txt
>
>
>
> this Mail is sorted correct by the sieve script
>
>
> Return-Path:
> Received: from storage.mail ([unix socket])
> by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
> Sun, 05 Feb 2017 19:14:15 +0100
> X-Sieve: CMU Sieve 2.3
> Received: from filter.mail by storage.mail (Postfix) with ESMTP id
> 5634078BA8
> Received: by filter.mail (Postfix) id 48F198E9
> Delivered-To: r...@filter.mail
> Received: from filter.mail [local] by filter.mail (Postfix) with ESMTP id
> 35E838E8
> Received: by filter.mail (Postfix, userid 496) id 2A20D8E9
> From: ClamAV
> To: walter@waldinet.local
> Subject: [mail] Virus detected in E-mail
> Message-Id: <20170205181415.2a20d...@mail.my.local>
> Date: Sun, 5 Feb 2017 19:14:15 +0100 (CET)
> X-AV-Scanned: ClamAV using ClamSMTP (filter.mail)
>
> The following information came from the Mail filter virtual machine.
>
> --[ Data submitted
> ]---
>
> Virus name: Heuristics.Phishing.Email.SpoofedDomain
> Sender:
> rte+ne-null-b1cb1a01203481e6zubgcse...@sellernotifications.amazon.com
>
> Quarantined to: /var/lib/clamd.clamsmtp/virus.XeKpYL
>
> --[ E-Mail header
> ]
>
> ...
>
>
>
> can someone give me a hint, what is wrong,
>
> Thanks,
> Walter
>
>
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
strange sieve problem
Hello,
I've found a Sieve Tester, where everything works as I expect
https://www.fastmail.com/cgi-bin/sievetest.pl
but Cyrus Sieve doesn't
here the Sieve-Script
# Sieve filter
require ["fileinto", "relational"];
if not exists ["from"]
{
discard;
}
elsif allof (address :all :is "from" "sq...@proxy.my.local",
address :all :is "to" "walter@my.local")
{
if header :matches "subject" "[proxy] Video-URL (*) detected"
{
fileinto "INBOX._Info.hbbtvVideoURLs";
}
elsif header :matches "subject" "[proxy] File-URL (*) detected"
{
fileinto "INBOX._Info.ftpFileURLs";
}
else
{
fileinto "INBOX._Info";
}
}
elsif allof (address :all :is "from" "cla...@mail.my.local",
address :all :is "to" "walter@my.local")
{
if header :matches "subject" "[mail] Virus detected in E-mail"
{
fileinto "INBOX._Alert";
}
}
elsif header :matches "list-id" "*"
{
fileinto "INBOX._MailLists._CENTOS";
}
elsif header :is "precedence" "bulk"
{
fileinto "INBOX.Trash";
}
else
{
keep;
}
and this is the Mail
Return-Path:
Received: from storage.mail ([unix socket])
by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
Mon, 03 Apr 2017 21:27:35 +0200
X-Sieve: CMU Sieve 2.3
Received: from proxy.host by storage.mail (Postfix) with ESMTP id 19B2C79235
Received: by proxy.host (Postfix, userid 23) id EB81D2B0BE
Date: Mon, 03 Apr 2017 21:27:34 +0200
To: walter@my.local
Subject: [proxy] File-URL (PC) detected
User-Agent: Heirloom mailx 12.4 7/29/08
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <20170403192734.eb81d2b...@proxy.my.local>
From: sq...@proxy.my.local (Squid)
The following information came from the Squid proxy virtual machine.
--[ Data submitted ]---
File-URL: ftp://ftp.adobe.com/lbtest.txt
this Mail is sorted correct by the sieve script
Return-Path:
Received: from storage.mail ([unix socket])
by storage.mail (Cyrus v2.3.16-Fedora-RPM-2.3.16-13.el6_6) with LMTPA;
Sun, 05 Feb 2017 19:14:15 +0100
X-Sieve: CMU Sieve 2.3
Received: from filter.mail by storage.mail (Postfix) with ESMTP id 5634078BA8
Received: by filter.mail (Postfix) id 48F198E9
Delivered-To: r...@filter.mail
Received: from filter.mail [local] by filter.mail (Postfix) with ESMTP id
35E838E8
Received: by filter.mail (Postfix, userid 496) id 2A20D8E9
From: ClamAV
To: walter@waldinet.local
Subject: [mail] Virus detected in E-mail
Message-Id: <20170205181415.2a20d...@mail.my.local>
Date: Sun, 5 Feb 2017 19:14:15 +0100 (CET)
X-AV-Scanned: ClamAV using ClamSMTP (filter.mail)
The following information came from the Mail filter virtual machine.
--[ Data submitted ]---
Virus name: Heuristics.Phishing.Email.SpoofedDomain
Sender: rte+ne-null-b1cb1a01203481e6zubgcse...@sellernotifications.amazon.com
Quarantined to: /var/lib/clamd.clamsmtp/virus.XeKpYL
--[ E-Mail header ]
...
can someone give me a hint, what is wrong,
Thanks,
Walter
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
