Delete all emails from a specific user

[MarcS1975]

Is there an easy way to delete all emails in a mailbox originating from a particular sender email. The emails have already been delivered, so its not a spam filter. Something like DELETE emails from mailbox where Sender = [email protected]

[casperklein]

Something like this should work:

# get mails from sender and verify
grep '^From: Foo Bar <foo@example>' data/maildata/DOMAIN/USER/cur

# get mails from sender and delete
grep -l '^From: Foo Bar <foo@example>' data/maildata/DOMAIN/USER/cur | xargs rm

[MarcS1975]

Thanks !
Just needed to add /* after cur and it worked perfectly.
Huge time saver (35,000 bot spam emails).
Thank you so much!!!

[casperklein]

To prevent getting some mails in the first place, you can use header checks. Here is an user-patches.sh example, how to discard mails with a certain subject:

# DISCARD/REJECT mails based on header
# http://www.postfix.org/header_checks.5.html
echo '/^Subject:.*Bitcoin Investment.*Earn.*/   DISCARD spam' >> /etc/postfix/maps/header_checks.pcre
echo '/^Subject:.*Invest In Bitcoin.*/          DISCARD spam' >> /etc/postfix/maps/header_checks.pcre

This can be adjusted for senders as well.

[MarcS1975]

Awesome. Thanks. How does this differ from sieve ?

…

On Sat, 4 Jan 2025 at 11:50, Casper ***@***.***> wrote: To prevent getting some mails in the first place, you can use header checks. Here is an user-patches.sh example, how to discard mails with a certain subject: # DISCARD/REJECT mails based on header# http://www.postfix.org/header_checks.5.htmlecho '/^Subject:.*Bitcoin Investment.*Earn.*/ DISCARD spam' >> /etc/postfix/maps/header_checks.pcreecho '/^Subject:.*Invest In Bitcoin.*/ DISCARD spam' >> /etc/postfix/maps/header_checks.pcre This can be adjusted for senders as well. — Reply to this email directly, view it on GitHub <#4303 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AMNNHGW6YIWN747JVLRAZZT2I7DITAVCNFSM6AAAAABUR3RXN6VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTCNZTGI4DSMQ> . You are receiving this because you authored the thread.Message ID: <docker-mailserver/docker-mailserver/repo-discussions/4303/comments/11732892 @github.com>

[polarathene]

The suggested .pcre file is handled by Postfix when mail is inbound, while Sieve is Dovecot (mail has already been accepted and is being delivered to Dovecot to store the mail on disk).

So the difference is just which service is applying the rules. Each user can have their own sieve rules and sieve is more flexible when needed.

[casperklein]

I don't know, I've never used sieve. It's probably just another way to achieve the same.

I think this way, an email is not accepted at all. While with sieve, the mail is accepted and later discarded/deleted?