exim + spam assassin + imap = /dev/null?

[pphillips]

I have a user whos mail goes to /dev/null instead of his mailbox when Spam Assassin is
enabled. With it disabled it works fine. He has 3 users, two use IMAP and one uses POP3 and it only happens to the users with IMAP.. not sure if there is any relation to IMAP here though, since obviously their ability to use IMAP or POP3 doesn't matter to the server when its dumping mail in their inbox. Here is a sample from the logs:

2006-03-21 10:11:00 1FLlJr-0003it-Fv <= [email protected] U=username P=local-bsmtp S=2065 id=1142964653.26479.8.camel@matrix-linux
2006-03-21 10:11:00 1FLlJr-0003it-Fv => /dev/null <[email protected]> R=central_filter T=**bypassed**
2006-03-21 10:11:00 1FLlJr-0003it-Fv Completed

So as you can see, their email is sent to /dev/null! When I disable Spam Assassin it goes fine. Spam Assassin has default configs. Build is WHM 3.1.0 cPanel is 10.8.1-R113.

Any idea? This is the strangest problem I've seen in a while.

 

[chirpy]

Has the user setup Filters for their account to drop emails with SA headers?

 

[pphillips]

There are no filters as far as I can tell. Nothing in cPanel > Spam Assassin config, or in the options in /webmail and no hidden files in their user directory except .cppop.cache, .cppope.cache.msgs and .mailboxlist.. maybe I'm looking in the wrong place?

The user had Spam Assassin with Spam Box enabled for some time, then suddently all their mail started being sent to /dev/null. The user says they haven't changed anything on the server, so my only other guess is that maybe an update broke it, but I'm not even sure how to check when/what updates were installed. This domain (two users) appears, at least so far, to be the only one affected...

There was one other problem this user had several days before this which is that a segment of mail on the server between two dates (a window of about 3 weeks) disappeared. I restored their inbox with a different name so they could transfer the missing messages from the backup to their inbox.. then we deleted the backup inbox. but only for one of the users and two are having this issue.

Any ideas?


Thanks so much for your time on this.
Paul