What does it mean, when deletion logging show nserver %Serverid%

HCL Domino Domino Forum
,
1

Hello,

at one of my customers a user is complaining about documents vanishing into the Junk folder without her having deleted them.

I have made plausible that she indeed did not do it (sometimes it happes seconds after the mail arrived in the middle of the night). I have excluded agents by logging agent starts in amgr. I ruled out archiving.

Now I enabled deletion logging and find entries like those:

20250322T085326,33+01","mail\dbname.nsf","C1258632:004C4xyz","nserver","CN=servername","SOFT", [...]

what does it mean, when the server itself seems to be the deleting party? (when the user did it, it would say "nserver", "username")

Would an agent show like this or would it show like: "namgr" , "servername"? What about webusers? How would they show up in the deletion log?

Thanks a lot for your thoughts

Manuel

2

Worth checking if the user has enabled some mail rules leading to this behaviour, like if sender contatins... xyz ... move to junk ... etc

Also check if some global rule is active at router level leading to this behaviour. Global rules can be found under configurations-router/smtp- restrictions and controls-rules.

You will definitely find an answer at one of the two above.

3

Hello,

thank you for your thoughts.

But there are no rules in the mail db nor on the server. I also checked calendarprofile for any "ghost-rules". Is there some way (an item or so) that marks a mail as having been handled by a rule?

So, when a rule soft deletes a mail then the logged actor is not "nrouter"?

Regards,

Manuel

4

You may try to delete the calendar profile of the concerned user. And recreate it again. Some times when you delete a rule without disabling, it still remains active in calendar profile

5

Hello Rajneesh,

thank you for your hint.

Unfortunately it did not help.

The calendar-profile does not contain a "$Filterformula" field and there is no serverrule that might be causing this, but the behaviour is still the same.

Any other thought on this?

btw: I created an idea for improving deletion logging. Please have a look:

https://domino-ideas.hcltechsw.com/ideas/DOMINO-I-2997

Thanks,

Manuel

6

Please check if it is happening in case of mails sent from a specific sender or specific mail server or specific IP Address.

Pl see the below documentation and see if it helps

1. User-Level Settings:
  • Junk Mail Rules:
    Users can create rules in their mail client (e.g., HCL Notes) to filter messages based on sender, subject, or other criteria, potentially directing emails to the junk folder.
  • Spam Protection Settings:
    Mail clients often have settings for spam protection, allowing users to block or allow certain senders or domains. These settings can inadvertently filter out legitimate emails.
2. Server-Level Configuration:
  • Spam Filtering:
    Domino servers can be configured to use various spam filtering methods, including blacklists, reputation checks, and content filtering.
  • DNS Blacklists:
    DNS blacklists identify hosts and domains known for sending spam. Domino can be configured to block or filter emails from senders listed on these blacklists.
  • Server Mail Rules:
    Domino administrators can create rules that trigger actions on incoming emails based on specific criteria. These rules can be used to move messages to different folders, reject them, or change their routing state.
3. Addressing the Issue:
  • Review User Rules:
    Users should check their mail client settings for any rules that might be incorrectly filtering out legitimate mail.
  • Adjust Spam Protection Settings:
    Users can modify spam protection settings to allow mail from trusted senders or domains.
  • Configure Server-Level Filtering:
    Domino administrators should review and adjust server-level spam filtering settings to ensure they are not overly aggressive.
  • Whitelist Trusted Senders:
    Admins can add trusted senders or domains to a whitelist to prevent their emails from being flagged as junk.
  • Examine Server Mail Rules:
    Admins should review and adjust server mail rules to ensure they are not inadvertently blocking legitimate mail.
7

Hello,

If your Domino server is V12.0.2 or later, Please check by any chance following settings enabled on the server?
Delivering untrusted mail to the Junk folder
https://help.hcl-software.com/domino/12.0.2/admin/conf_deliver_untrusted_mail_to_junk.html

Configuring the Domino SMTP server to reduce spam
https://help.hcl-software.com/domino/12.0.2/admin/conf_configure_domino_smtp_server_to_reduce_spam.html

Regards,
Chaitanya Y