as fas as i understand the filter it works as follows:
check if the body contais somestring or anotherstring ....is both possible?
and if the adress is from domain @amazon.de
redirect
there are more rules before/after this one
Code: Select all
elsif allof (
body :contains ["somestring", "anotherstring"],
address :domain :is "From" "amazon.de"
)
{
redirect "adifferentemailadress@lala.de";
}
message header looks like this:
Code: Select all
Return-Path: <20151222204517fb40b65ef5034b98b32860d13900p0eu@bounces.amazon.de>
Delivered-To: julius@myvirtualdomain
Received: from yellowstone (localhost [IPv6:::1])
by yellowstone.bohlsen.lan (Postfix) with ESMTP id 3DA5E486
for <julius@myvirtualdomain>; Tue, 22 Dec 2015 21:45:39 +0100 (CET)
X-Apparently-To: commercials24@yahoo.de; Tue, 22 Dec 2015 20:45:20 +0000
Received-SPF: pass (domain of bounces.amazon.de designates 176.32.127.206 as permitted sender)
X-YMailISG: JpqxQ74WLDuVyIJqufRshXuZajFMSUpibVZZ93BBtfoi6J9D
Nv7m07eMChldsZs_ndanGAWs_cS0Idhc3p0VnXISMbPpkODdqXkS6w7wYTxF
JQRoshhbI8XmH0Qt0t9KkQ_RigNQcgCCavRCmCZ7vD_nVIANlJxsrl49ifIl
...
X-Originating-IP: [176.32.127.206]
Authentication-Results: mta1124.mail.ir2.yahoo.com from=amazon.de; domainkeys=neutral (no sig); from=amazonses.com; dkim=pass (ok)
Received: from imap.mail.gm0.yahoodns.net [188.125.68.184]
by yellowstone with IMAP (fetchmail-6.3.26)
for <julius@myvirtualdomain> (single-drop); Tue, 22 Dec 2015 21:45:39 +0100 (CET)
Received: from 127.0.0.1 (EHLO lux.smtp-out.eu-west-1.amazonses.com) (176.32.127.206)
by mta1124.mail.ir2.yahoo.com with SMTPS; Tue, 22 Dec 2015 20:45:20 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
...
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
...
Date: Tue, 22 Dec 2015 20:45:19 +0000
From: "Amazon.de" <versandbestaetigung@amazon.de>
Reply-To: "versandbestaetigung@amazon.de" <versandbestaetigung@amazon.de>
To: julius junghans <commercials24@yahoo.de>
Message-ID: <00000151cb7063cc-33997937-9542-4be3-b4e3-7dcbde280cdd-000000@eu-west-1.amazonses.com>
Subject: Ihre Amazon.de Bestellung von "Souls of all debian forum users" wurde
versandt!
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_4669607_480498372.1450817119090"
X-AMAZON-RTE-VERSION: 2.0
X-AMAZON-METADATA: CU=A1OAFBNFJRC8LS
Bounces-to: 20151222204517fb40b65ef5034b98b32860d13900p0eu@bounces.amazon.de
X-AMAZON-MAIL-RELAY-TYPE: notification
X-Original-MessageID: <urn.rtn.msg.20151222204517fb40b65ef5034b98b32860d13900p0eu@1450817119097.rte-svc-eu-1bbig-i-2aab1886.eu-west-1.amazon.com>
X-SES-Outgoing: 2015.12.22-10.42.213.65
Feedback-ID: 1.eu-west-1.KxLUKazDI5D9NzBxTS3SoD/MTlcLZY0yvg8x5uoOkSk=:AmazonSES
the mail is collected to a virtual mail user on my system, there .dovecot.sieve is checked against it
maybe that has something todo with it?