Sieve not exists

[@lbutlr]

I thought this was working as intended, but I have recently been getting some random messages put into this mailbox that definitely have list-ip headers (including some messages from this list) and that do not have multiple addresses. I believe this started happening on 20200922, which would hav been when I applied the most recent update to dovecot, as that is when the listCC box seemed to explode, but I do not have traces over 7 days old.

if allof (address :count "ge" :comparator "i;ascii-numeric" ["to", "cc"] ["2"],
                  not exists ["list-id","mailing-list", "x-loop"] )
        {
                fileinto :create "listCC";
stop;}

Headers of a message that triggered this (minus Received and signature headers, just removed for length)

This is the trace:

  23: address test
  23:   starting `:count-ge' match with `i;ascii-numeric' comparator:
  23:   extracting `to' headers from message
  23:   parsing address header value `Kurt Jaeger <dovecot at opsec.eu>, dovecot at dovecot.org'
  23:   address value `dovecot at opsec.eu'
  23:   address value `dovecot at dovecot.org'
  23:   extracting `cc' headers from message
  23:   matching count value `2'
  23:     with key `2' => 1
  23:   finishing match with result: matched

So, it looks like it is matching Reply-To and/or X-Original-To as well as To? Or is something else happening here?

  23: jump if result is false
  23:   not jumping
  24: exists test
  24:   header `list-id' exists
  24:   header `mailing-list' is missing
  24:   headers are missing
  24: jump if result is true
  24:   not jumping

Or the logic of "not exists" has changed from AND (meaning none of those headers exist)?

  26: fileinto action
  26:   store message in mailbox `listCC'
  27: stop command; end all script execution
      ## Finished executing script '.active_sieve'

Headers of that message (minute received and signature headers, elided just for length)

Reply-To: dovecot at dovecot.org
Return-Path: <dovecot-bounces at dovecot.org>
X-Original-To: dovecot at dovecot.org
Delivered-To: dovecot at dovecot.org
Date: Wed, 30 Sep 2020 17:06:54 +0200
From: Kurt Jaeger <dovecot at opsec.eu>
To: dovecot at dovecot.org
Subject: debugging TLS with wireshark and a custom application ?
Message-ID: <20200930150654.GT53210 at home.opsec.eu>
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-BeenThere: dovecot at dovecot.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Dovecot Mailing List <dovecot.dovecot.org>
List-Unsubscribe: <https://dovecot.org/mailman/options/dovecot>,
 <mailto:dovecot-request at dovecot.org?subject=unsubscribe>
List-Archive: <https://dovecot.org/pipermail/dovecot/>
List-Post: <mailto:dovecot at dovecot.org>
List-Help: <mailto:dovecot-request at dovecot.org?subject=help>
List-Subscribe: <https://dovecot.org/mailman/listinfo/dovecot>,
 <mailto:dovecot-request at dovecot.org?subject=subscribe>
Errors-To: dovecot-bounces at dovecot.org
Sender: "dovecot" <dovecot-bounces at dovecot.org>

There is one address in the To and no CC header at all, so why was this filed into listCC?

(This is the only incidence of listCC in the sieve file for the list user)



-- 
"I used to hate the sun, because it'd shone on everything I'd done.
	Made me feel that all that I had done was overfill the ashtray of
	my life."