Hello
Currently trying to move from Gmail to maicow + SOGo. One of the issues I 
encounter is the filtering in mailcow/SOGo.
I've got the following filter:
 * Match any of the following rules
 * From, matches regex, 
.*@(bergportal\.ch|freezetag\.com|garmin\.com|geocaching\.com|komoot\.de|munzee\.com|quaeldich\.de|spontacts\.com|squadrats\.com|strava\.com|update\.strava\.com|velocity\.ch|wandrer\.earth)$
 * To or Cc, matches regex, 
hiking-buddies@dom1\.rodeo|carving\.fleshed313@dom2\.vip|com\+wandrer\[email protected]|squadrats\.com@dom1\.rodeo
 * From, contains, [email protected] * Actions
 * File the message in, 🏔🚴 Draussen
However, it does not work. But why? Are there logs somewhere?
It should match - I'm looking for “From” “matches” "…freezetag\.com
$ grep -i freezetag\.com ~/tmp/message-headers-freezetag.txt
    dkim=pass header.d=freezetag.com header.s=k3 header.b=PLkik2a8;
    dmarc=pass (policy=none) header.from=freezetag.com
    dkim=pass header.d=freezetag.com header.s=k3 header.b=PLkik2a8;
    dmarc=pass (policy=none) header.from=freezetag.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freezetag.com; s=k3;
    t=1742915017; x=1743185017; [email protected];
From: Munzee Gardening Club <[email protected]>
Reply-To: =?utf-8?Q?Munzee=20Gardening=20Club?= <[email protected]>
    
FORGED_SENDER(0.30)[[email protected],bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net];
    R_DKIM_ALLOW(0.00)[freezetag.com:s=k3];
    DMARC_POLICY_ALLOW(0.00)[freezetag.com,none];
    
FROM_NEQ_ENVFROM(0.00)[[email protected],bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net];
    HAS_REPLYTO(0.00)[[email protected]];
    DKIM_TRACE(0.00)[freezetag.com:+];
 
I'll attach the complete headers.
Any ideas about why it does not work? How can I test this?
I would have thought it might be, because I'm doing “.*@freezetag.com$”, ie. 
freezetag.com must be at the end of the line. But in the “From:” line, there's 
the “>” after “freezetag.com”.
BUT… I've got a different filter with this rule:
 * 
From, matches re, .*@(company\.com|name1\.me|name2\.one)$
 
And this DOES work. It matched an email with this from line in the headers:
From: Alexander Skwar <[email protected]>

 There was also a “>” at the end (which there will almost always be; at least 
if there's a “real name” and if it's not using the outdated syntax of 
“[email protected] (real name)”).
Help would be immensely appreciated for getting filters with regexps to work.
Thanks a lot,
 
Alexander
-- 
Complete contact details at https://a.skwar.xyz/
 
Return-Path: 
<bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net>
Delivered-To: [email protected]
Received: from mail.5y5.one ([172.22.1.253])
        by 0cd548d1753a with LMTP
        id UOA5Ds3F4mfuQQAAMqFE5w
        (envelope-from 
<bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net>)
        for <[email protected]>; Tue, 25 Mar 2025 16:03:41 +0100
X-Original-To: [email protected]
Received: from mail86.atl111.rsgsv.net (mail86.atl111.rsgsv.net [198.2.131.86])
        (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
         key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest 
SHA256)
        (No client certificate requested)
        by mail.5y5.one (Postcow) with ESMTPS id 07286BBEEB
        for <[email protected]>; Tue, 25 Mar 2025 16:03:39 
+0100 (CET)
Authentication-Results: mail.5y5.one;
        dkim=pass header.d=freezetag.com header.s=k3 header.b=PLkik2a8;
        spf=pass (mail.5y5.one: domain of 
bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net designates 
198.2.131.86 as permitted sender) 
smtp.mailfrom=bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net;
        dmarc=pass (policy=none) header.from=freezetag.com
ARC-Seal: i=1; s=dkim; d=acc.alexs77.rodeo; t=1742915020; a=rsa-sha256;
        cv=none;
        b=T7W62dDCeG5QewKGQqXMRggXgwLgmd4rcWePXoNdp7Ls9m1Q7t0WvEIZUNIDy0ZhYJgsLO
        Pbo7fKU9WDulkr5Q20mBJi2+yg2FOvngfzTCbbRco997mjpp8BIIxF6o22vwbwUlN+uX1S
        isAzahSntreC0luDNscl0h9Lasd2C/4m6KQKKUoKK5Q8Jz72HOT3oAFwNSaGbHlqACiOuX
        xEI/SNbrDEZM40RNRPCM2JUrajlxwgpI/XHb16R4UVw5b8P2fFVv55Harm3DrkHpYaRZAI
        tQ5QrKu/jPhPVzMTENp1kwBmTTaLom98Spc1JC8Xot6SxuDZOLXOO8/PzaPaRA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed;
        d=acc.alexs77.rodeo; s=dkim; t=1742915020;
        h=from:from:reply-to:reply-to:subject:subject:date:date:
         message-id:message-id:to:to:cc:mime-version:mime-version:
         content-type:content-type:list-id:list-unsubscribe:
         list-unsubscribe-post:dkim-signature;
        bh=9Leh2G+DQch8CeMPDcVzQe2BdRmNjacu2Sf6rwWAqnA=;
        b=jAgaqJgG4M9LyMBqGrBq8hPinjyvL2KOPaXanBGpGLMQXAT8HLHyheCxMGoCpt+kBqVAqf
        1eByBnMvIXxJWNOpnqbHTdVmr7Ya5t/YSw6HrVkXaX632eBfKWMg1JaWOSr8ujqkLlQc7i
        Zgk8JyCfdZj7ZeLl9HPKnDet5wezLkqd1l3eC8j/ERLzaKPQp00gbqiIo1oddB/ilq7u8P
        CEGyweCfV9fk5Mf2fSz+mVXD8HwkiXj3MObTep5HA7TWgPx2wqc8VIJ9qCtGZBg7NlkeAX
        P1iD3bLc2k4PSR4lYES53Xm2mTLiUl+b8x+j8SfJjQoxBXbTCLfZo7ReuHCkig==
ARC-Authentication-Results: i=1;
        mail.5y5.one;
        dkim=pass header.d=freezetag.com header.s=k3 header.b=PLkik2a8;
        spf=pass (mail.5y5.one: domain of 
bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net designates 
198.2.131.86 as permitted sender) 
smtp.mailfrom=bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net;
        dmarc=pass (policy=none) header.from=freezetag.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freezetag.com; s=k3;
        t=1742915017; x=1743185017; [email protected];
        bh=9Leh2G+DQch8CeMPDcVzQe2BdRmNjacu2Sf6rwWAqnA=;
        h=Subject:From:Reply-To:To:Date:Message-ID:X-MC-User:Feedback-ID:
         List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:
         MIME-Version:CC:Date:Subject:From;
        b=PLkik2a8UaY/arGypStXXo1N6DMVWwJuhA+WGzesPwyZ9JQ40LD9PcTBsHNNqQAiq
         w5vobmMmMZz8MZ2LsUcEGjAJNeocUM1mjQ9sg3f2Tl2XZWyvpm5zlAM7FxnaUM3SWp
         j9gogf+r3bHafuiSxTfoQokJuxj1U27IZ8cqjtRT8WQD95nC8m9qUnvfAzJ5OWUmZk
         iAeZBr8IJyIE031dYimMkvVQaErmiJvMILYUT6wHaRxSQA9neOpWzwRUYEAy8H8UqY
         Yp0YxaLhwKY6bqOZs3guMXI7QF8xoS8XgFtAPGU+oVkl+bPamNzSczHTsdDV35P0xp
         IEEPO5tC6slUg==
Received: from localhost (localhost [127.0.0.1])
        by mail86.atl111.rsgsv.net (Mailchimp) with ESMTP id 4ZMY8T1y3lzQY6wW3
        for <[email protected]>; Tue, 25 Mar 2025 15:03:37 
+0000 (GMT)
Subject: 
=?utf-8?Q?=F0=9F=93=8DHelp=20Build=20A=20Munzee=20Virtual=20Garden=20In=20April=21=20=F0=9F=AA=B4?=
From: Munzee Gardening Club <[email protected]>
Reply-To: =?utf-8?Q?Munzee=20Gardening=20Club?= <[email protected]>
To: <[email protected]>
Date: Tue, 25 Mar 2025 15:03:25 +0000
Message-ID: 
<4479093493dc5d8002a758dda.b55424bf51.20250325150306.e3048e10a6.23288...@mail86.atl111.rsgsv.net>
X-Mailer: Mailchimp Mailer - **CIDe3048e10a6b55424bf51**
X-Campaign: mailchimp4479093493dc5d8002a758dda.e3048e10a6
X-campaignid: mailchimp4479093493dc5d8002a758dda.e3048e10a6
X-Report-Abuse: Please report abuse for this campaign here: 
https://mailchimp.com/contact/abuse/?u=4479093493dc5d8002a758dda&id=e3048e10a6&e=b55424bf51
X-MC-User: 4479093493dc5d8002a758dda
Feedback-ID: 38846137:38846137.13528275:us10:mc
List-ID: 4479093493dc5d8002a758ddamc list 
<4479093493dc5d8002a758dda.316089.list-id.mcsv.net>
X-Accounttype: pr
List-Unsubscribe: 
<https://freezetag.us10.list-manage.com/unsubscribe?u=4479093493dc5d8002a758dda&id=0add924266&t=h&e=b55424bf51&c=e3048e10a6>,
 
<mailto:unsubscribe-mc.us10_4479093493dc5d8002a758dda.e3048e10a6-b55424b...@unsubscribe.mailchimpapp.net?subject=unsubscribe>
List-Unsubscribe-Post: List-Unsubscribe=One-Click
Content-Type: multipart/alternative; boundary="_----------=_MCPart_1716065193"
MIME-Version: 1.0
X-Last-TLS-Session-Version: TLSv1.3
X-Rspamd-Queue-Id: 07286BBEEB
X-Spamd-Result: default: False [5.74 / 15.00];
        BAYES_HAM(-3.06)[92.94%];
        URIBL_GREY(2.50)[list-manage.com:url];
        HS_BODY_372(2.00)[];
        BAD_REP_POLICIES(2.00)[];
        REPLYTO_EXCESS_QP(1.20)[];
        SUSPICIOUS_URL_IN_SUSPICIOUS_MESSAGE(1.00)[];
        
FORGED_SENDER(0.30)[[email protected],bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net];
        RWL_MAILSPIKE_VERYGOOD(-0.20)[198.2.131.86:from];
        MANY_INVISIBLE_PARTS(0.10)[2];
        ZERO_FONT(0.10)[1];
        MIME_GOOD(-0.10)[multipart/alternative,text/plain];
        IP_REPUTATION_HAM(-0.08)[asn: 14782(-0.07), country: US(-0.01), ip: 
198.2.131.86(0.00)];
        HAS_LIST_UNSUB(-0.01)[];
        MX_GOOD(-0.01)[];
        R_DKIM_ALLOW(0.00)[freezetag.com:s=k3];
        BCC(0.00)[];
        SUBJECT_HAS_EXCLAIM(0.00)[];
        FROM_HAS_DN(0.00)[];
        RCPT_COUNT_ONE(0.00)[1];
        RCVD_IN_DNSWL_NONE(0.00)[198.2.131.86:from];
        RECEIVED_HELO_LOCALHOST(0.00)[];
        ARC_NA(0.00)[];
        MIME_TRACE(0.00)[0:+,1:+,2:~];
        CLAM_VIRUS_FAIL(0.00)[failed to scan and retransmits exceed];
        RCVD_TLS_LAST(0.00)[];
        DMARC_POLICY_ALLOW(0.00)[freezetag.com,none];
        REPLYTO_DN_EQ_FROM_DN(0.00)[];
        PREVIOUSLY_DELIVERED(0.00)[[email protected]];
        REDIRECTOR_URL(0.00)[list-manage.com,twitter.com];
        TO_DN_NONE(0.00)[];
        
FROM_NEQ_ENVFROM(0.00)[[email protected],bounce-mc.us10_38846137.13528275-b55424b...@mail86.atl111.rsgsv.net];
        REPLYTO_ADDR_EQ_FROM(0.00)[];
        TO_MATCH_ENVRCPT_ALL(0.00)[];
        R_SPF_ALLOW(0.00)[+ip4:198.2.131.86];
        RCVD_COUNT_ONE(0.00)[1];
        HAS_REPLYTO(0.00)[[email protected]];
        ASN(0.00)[asn:14782, ipnet:198.2.128.0/19, country:US];
        DKIM_TRACE(0.00)[freezetag.com:+];
        REPLYTO_DOM_NEQ_TO_DOM(0.00)[];
        ARC_SIGNED(0.00)[acc.alexs77.rodeo:s=dkim:i=1]





Reply via email to