Forum Debian Users Gang

Hej!

Mój Exim4 zachowuje się niegrzecznie i za nic w świecie nie mogę dojśc co mu jest. Poczta od jednego z nadawców ląduje od razu w Mailbox/Spam  i nie mogę dojść czym to jest spowodowane.

Konfiguracja na maszynie klasyczna, konfig w jednym pliku, MTA to dovecot + do tego spamassasin.
Nigdzie nie moge znaleźc żadnego fragmentu, który mógłby powodować takie zachowanie.
W logu mam tak:

2026-01-19 19:16:34.982 [121366] SMTP connection from [AAA.BBB.CCC.DDD]:59478 I=[my.ip.addr]:25 Ci=121366 (TCP/IP connection count = 1)
2026-01-19 19:16:35.812 [121366] 1vhtnn-00000000VZW-2hSR DKIM: d=sendredomain.com s=dkim c=relaxed/simple a=rsa-sha256 b=1024 t=1768846594 x=1771438595 [verification succeeded]
2026-01-19 19:16:36.423 [121366] 1vhtnn-00000000VZW-2hSR <= info@senderdomain.net H=mail.sendredomain.com [AAA.BBB.CCC.DDD]:59478 I=[my.ip.addr]:25 Ci=121366 P=esmtps L.X=TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no S=28017 M8S=7 DKIM=sendredomain.com RT=0.135s d=20260119181634.C545047820@mail.sendredomain.com T="subject" from <info@senderdomain.net> for receipient@mydomain.com
2026-01-19 19:16:36.470 [121366] SMTP connection Ci=121366 from mail.sendredomain.com [AAA.BBB.CCC.DDD]:59478 I=[my.ip.addr]:25 D=1.486s closed by QUIT
2026-01-19 19:16:36.507 [121381] cwd=/var/spool/exim4 3 args: /usr/sbin/exim4 -Mc 1vhtnn-00000000VZW-2hSR
2026-01-19 19:16:36.672 [121381] 1vhtnn-00000000VZW-2hSR => /home/receipient/Maildir/.INBOX.Spam/ <receipient@mydomain.com>  F=<info@senderdomain.net> P=<info@senderdomain.net> R=userforward T=address_directory S=28141 QT=0.892s DT=0.154s
2026-01-19 19:16:36.672 [121381] 1vhtnn-00000000VZW-2hSR Completed QT=1.029s

A sam mail ma nagłówki:
Return-path: <info@senderdomain.net>
Envelope-to: receipient@mydomain.com
Delivery-date: Mon, 19 Jan 2026 19:16:36 +0100
Received-SPF: pass (myhost.mydomain.com: domain of senderdomain.net designates AAA.BBB.CCC.DDD as permitted sender) client-ip=AAA.BBB.CCC.DDD; envelope-from=info@senderdomain.net; helo=mail.sendredomain.com;
Received: from mail.sendredomain.com ([AAA.BBB.CCC.DDD]:59478)
    by myhost.mydomain.com with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
    (Exim 4.98.2)
    (envelope-from <info@senderdomain.net>)
    id 1vhtnn-00000000VZW-2hSR
    for receipient@mydomain.com;
    Mon, 19 Jan 2026 19:16:36 +0100
Received: from mail.sendredomain.com (localhost [127.0.0.1])
    by mail.sendredomain.com (Postfix) with ESMTP id C545047820
    for <receipient@mydomain.com>; Mon, 19 Jan 2026 19:16:34 +0100 (CET)
Authentication-Results: mail.sendredomain.com (amavisd-new);
    dkim=pass (1024-bit key) reason="pass (just generated, assumed good)"
    header.d=sendredomain.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=
    sendredomain.com; h=mime-version:content-disposition
    :content-transfer-encoding:content-type:content-type:date:date
    :subject:subject:to:from:from; s=dkim; t=1768846594; x=
    1771438595; bh=r4Teoscba6xAms/bpGTtQPSQn6djmaNbuB9ArlrGNic=; b=E
    Z67xCf3W7xtqabY68RUYrIdONoTwV7Ykgtt0JrF6jXEPbUbWZM6Q4jyE+I+hhZ0w
    pIp7h8cCHJPgQEP8+DOAj5CHpBDCN7fqM/e/24zg46uuP3KKDtsTC05qXLUpMte8
    e9CyrCkBKQjaWzsi9YNkFV2PkGqyC+80fXErIdkErU=
X-Virus-Scanned: Debian amavisd-new at mail.sendredomain.com
X-Spam-Flag: NO
X-Spam-Score: 3.588
X-Spam-Level: ***
X-Spam-Status: No, score=3.588 tagged_above=2 required=6.2
    tests=[ALL_TRUSTED=-1, DOS_BODY_HIGH_NO_MID=3.7,
    HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001,
    HTML_MIME_NO_HTML_TAG=0.635, MIME_HTML_ONLY=0.1, MISSING_MID=0.14,
    T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001]
    autolearn=no autolearn_force=no
Received: from mail.sendredomain.com ([127.0.0.1])
    by mail.sendredomain.com (mail.sendredomain.com [127.0.0.1]) (amavisd-new, port 10026)
    with ESMTP id pt4WZ1iCf6Wp for <receipient@mydomain.com>;
    Mon, 19 Jan 2026 19:16:34 +0100 (CET)
Received: from localhost (ns3088944.ip-141-94-75.eu [141.94.75.196])
    by mail.sendredomain.com (Postfix) with ESMTPSA id 85FB747814
    for <receipient@mydomain.com>; Mon, 19 Jan 2026 19:16:34 +0100 (CET)
From: GoldBikiniClub <info@senderdomain.net>
To: receipient@mydomain.com
Subject: =?UTF-8?Q?Masz=20now=C4=85=20wiadomo=C5=9B=C4=87?=
Date: Mon, 19 Jan 2026 19:16:34 +0100
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
MIME-Version: 1.0
Message-Id: <20260119181634.C545047820@mail.sendredomain.com>
X-Spam_score: -96.3
X-Spam_bar: ---------------------------------------------------

Gdzie szukać tego przekierowania do /home/receipient/Maildir/.INBOX.Spam/  ?