Emails Ending up in Junk

[Aki Tuomi]

I recommend looking into mail_log plugin. https://doc.dovecot.org/settings/plugin/mail-log-plugin/

Aki

> On 03/04/2021 02:57 Asai <asai at globalchangemusic.org> wrote:
> 
> 
> Hello Łukasz,
> This happens when the user is logged in on the computer. The user has to check for important emails in Junk regularly. We're trying to turn off adaptive Junk filters in Thunderbird right now, but I'm not sure if it's a TB issue or something with the server side filtering. Also, Spamassassin isn't marking these emails as spam either, so we're kind of stumped right now.
> 
> On 4/2/2021 1:34 PM, Łukasz Szczepański wrote:
> 
> > Thunderbird has built in spam control feature and can move message to junk on it self. When message is moved to Junk? Only when user is connected to mailbox or even when nobody is logon?
> > 
> > W dniu 2 kwi 2021, o 20:26, użytkownik Asai <asai at globalchangemusic.org> napisał:
> > > Greetings,
> > > I'm trying to debug an issue with a user who is finding emails (user uses Thunderbird as client) ending up in Junk folder, and constantly marks email as Not Junk, but important email ends up in Junk folder.
> > > I have sieve set up, but am unable to determine if this is the result of a sieve problem (sieve will automatically move certain emails into Junk if certain headers are present, but these headers are not present on these emails.)
> > > I'm looking in Dovecot debug logs to try to figure this out, but all I can find is sometimes this, and I don't know if this is relevant. Can anyone point us in the right direction for solving this issue?
> > > 
> > > Apr 01 11:51:05 imap(user at domain.tld)<102535><+kTsYd6+f83AqEbH>: Debug: Mailbox Junk: Mailbox opened because: UID move
> > > Apr 01 11:57:08 imap(user at domain.tld)<102735><P3dSa96+kM3AqEbH>: Debug: Mailbox Junk: UID 565: Opened mail because: prefetch
> > > Apr 01 11:57:08 imap(user at domain.tld)<102735><P3dSa96+kM3AqEbH>: Debug: Mailbox Junk: UID 565: Opened mail because: access
> > > Apr 01 11:57:08 imap(user at domain.tld)<102735><P3dSa96+kM3AqEbH>: Debug: Mailbox Junk: UID 565: Opened mail because: full mail
> > > Apr 01 12:00:20 imap(user at domain.tld)<71333><OX7P1+2+BfcKCgFy>: Debug: Mailbox Junk: Mailbox opened because: STATUS
> > > Apr 01 18:52:10 imap(user at domain.tld)<114066><WLt3mPO+z8QKCgFy>: Debug: Mailbox Junk: Mailbox opened because: SELECT
> > > 
> -- 
> Asai
> 520.260.6887