After some test :

This is my .mailfilter in /var/spool/postfix/virtual/

___________________________________________________________________ logfile maildrop.log

`[ -d $DEFAULT ] || (maildirmake $DEFAULT && maildirmake -f Spam $DEFAULT &&
maildirmake -f sent-mail $DEFAULT)`

TEST = `pwd`

log "(==) $TEST" log "(==) $HOME" log "(==) $DEFAULT"

`test -r $DEFAULT.mailfilter`

log "(==) $RETURNCODE "

if( $RETURNCODE == 0 ) {

log "(==) Including $DEFAULT.mailfilter"

exception { include $DEFAULT.mailfilter }

}

______________________________________________________________________

The right : [root@soez virtual]# ls -la total 80 drwxr-xr-x 3 vmail vmail 4096 mar 20 10:48 . drwxr-xr-x 17 root root 4096 jan 18 16:26 .. -rw------- 1 vmail vmail 18164 mar 20 10:39 maildrop.log -rw------- 1 vmail vmail 457 mar 20 10:22 .mailfilter drwx------ 4 vmail vmail 4096 jan 21 16:47 domaine

And my per user .mailfilter in
/var/spool/postfix/virtual/domaine/user/.mailfiter

_______________________________________________________________________ logfile maildroperso.log

log "(==) included"

`test -d $HOME/$DEFAULT.INBOX.LogWatch

if ( $RETURNCODE == 1 ) { `maildirmake -f .INBOX.LogWatch $DEFAULT` `echo LogWatch>> $DEFAULT/subscriptions` }

if ( /^From: logw...@soez.be/ ) { to "$DEFAULT/.INBOX.LogWatch" log "On change" }

_______________________________________________________________________

When i send a mail, the general .mailfiter is read and on the
logfile(maildrop.log ) i have this :

(==) /var/spool/postfix/virtual # The pwd path (==) /var/spool/postfix/virtual # $HOME path (==) soez.be/administrateur/ # $DEFAULT path (==) 0 # $RETURNCODE
of test -r domaine/administrateur/.mailfilter (==) Including domaine/user/.mailfilter #A test to see if they pass the
test

After that i know they found the per user .mailfiter who have this right :

[root@soez virtual]# ls -la domaine/user/ total 220 drwx------ 9 vmail vmail 4096 mar 20 10:26 . drwx------ 4 vmail vmail 4096 jan 21 16:47 .. drwx------ 2 vmail vmail 12288 mar 20 10:25 cur -rw------- 1 vmail vmail 204 mar 20 10:25 dovecot.index -rw------- 1 vmail vmail 29696 mar 20 10:25 dovecot.index.cache -rw------- 1 vmail vmail 55748 mar 20 10:26 dovecot.index.log -rw------- 1 vmail vmail 544 mar 20 10:25 dovecot-uidlist drwx------ 5 vmail vmail 4096 jan 17 17:03 .Drafts drwx------ 5 vmail vmail 4096 mar 20 10:22 .Junk -rw-r----- 1 vmail vmail 3704 mar 20 10:25 maildirsize -rw------- 1 vmail vmail 307 mar 20 10:25 .mailfilter
<-------- drwx------ 2 vmail vmail 4096 mar 20 10:25 new drwx------ 5 vmail vmail 4096 fév 27 10:19 .Sent -rw------- 1 vmail vmail 29 mar 19 13:18 subscriptions drwx------ 2 vmail vmail 4096 mar 20 10:25 tmp drwx------ 5 vmail vmail 4096 mar 20 10:26 .Trash

I try to log anything from the per user .mailfiter but i can't...

Maildrop ignore the file ? Or maybe the include was't correct ?

maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -w 90 -d ${user}@${nexthop}
${extension} ${recipient} ${user} ${nexthop} ${sender}

I don't need -m or -M flag ?

Thanks for your help if thing we are on the good way...