Emails from our own users to our own users are going to spam!

[Greg]

Version: 2.4.6

For some reason email from one user on our domain to me is being moved to the spam folder, and when I try to move it back to the inbox, it just moves it right back!

Here are some of the relevant headers:

Received: from mail.domain.com
  by mail.domain.com with LMTP
  id oNjJDSgEq2ZwMAwAXRy+/A
  (envelope-from <[e-mail]>)
  for <[e-mail]>; Wed, 31 Jul 2024 20:42:32 -0700
Authentication-Results: mail.domain.com;
  auth=pass (plain);
  spf=softfail (mail.domain.com: domain of transitioning [e-mail] does not designate xx.xx.xx.xx as permitted sender) smtp.mailfrom=[e-mail] smtp.helo=smtpclient.apple;
  dkim=none (message not signed);
  dmarc=fail (p=NONE arc=none) header.from=domain.com header.d=domain.com
Received-SPF: softfail (mail.domain.com: domain of transitioning [e-mail] does not designate xx.xx.xx.xx as permitted sender)
 client-ip=xx.xx.xx.xx;
Received: from smtpclient.apple (xx-xx-xx-xx [xx.xx.xx.xx])
  by mail.domain.com (Haraka) with ESMTPSA id DBE6289C-0D93-4CCE-ABD6-6E6DAF2798BE.1
  envelope-from <[e-mail]>
  tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (authenticated bits=0);
  Thu, 01 Aug 2024 03:42:31 +0000

‌

Note that there are no X-Rspamd- headers present!

I don’t know why it says that spf=softail or why it says dmarc=fail or dkim=none or any of that, because when I send a message to [e-mail] this is what I get back:

‌

==========================================================
Summary of Results
==========================================================
SPF check:          pass
"iprev" check:      pass
DKIM check:         pass

‌

What’s especially odd is that this is happening for one domain that we’re using but not for a different domain that uses this email server - for the same user, sending emails via the same mail client!

EDIT: And the weirdest thing is that it’s even doing it for webmail and the headers don’t show any problems at all!

Received: from mail.domain.com
  by mail.domain.com with LMTP
  id 0DKoCYgMq2YkDQAAXRy+/A
  (envelope-from <[e-mail]>)
  for <[e-mail]>; Wed, 31 Jul 2024 21:18:16 -0700
Authentication-Results: mail.domain.com;
  auth=pass (login)
Received: from localhost (ip6-localhost [127.0.0.1])
  by mail.domain.com (Haraka) with ESMTPSA id F106BC4F-9A03-4811-B2A0-A054E11CA981.1
  envelope-from <[e-mail]>
  tls TLS_AES_256_GCM_SHA384 (authenticated bits=0);
  Thu, 01 Aug 2024 04:18:16 +0000
MIME-Version: 1.0
Date: Wed, 31 Jul 2024 21:18:15 -0700
From: [e-mail]
To: Greg <[e-mail]>

‌

Help??

‌

[Greg]

It seems like this was due to a mobile email client automatically sending those emails to junk. Using that email client I’ve marked those emails as not junk, and for now it seems like they’re actually staying in the Inbox. So closing this issue… if it re-appears I’ll re-open.