==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version:1.6.1 MARIADB edition
- Linux/BSD distribution name and version: Debian 11 bullseye
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

An unknown user has sent an email by mistake using and address that was malformed.

warning: Illegal address syntax from localhost[127.0.0.1] in RCPT command: <xxx.xxx@abc/xyz.com>

The original recipient address should have been <xxx.xxx@abc-xyz.com>. I cannot seem to find where this email is stuck in the queue but it shows up periodically in the mail.log and I cannot seem to get rid of it?

Is there a way to re-write the address to a postmaster or admin email address just to get it out of the mail system? it's been running round in the mail system for more than a month now.

I have tried re-writing the command filter but has no effect or I am doing it wrong. Can I check in SOGo somehwere?

command_filter.pcre content
/^(<xxx.xxx@abc/xyz.com>)/ REPLACE <admin@domain.com>

Any help would be appreciated.