diff --git a/roles/dovecot/files/before.sieve b/roles/dovecot/files/before.sieve
new file mode 100644
index 0000000..e9b460e
--- /dev/null
+++ b/roles/dovecot/files/before.sieve
@@ -0,0 +1,6 @@
+require ["fileinto","mailbox"];
+
+if header :contains "X-Spam-Flag" "YES" {
+  fileinto :create "Junk";
+}
+
diff --git a/roles/dovecot/handlers/main.yml b/roles/dovecot/handlers/main.yml
index bf8b437..c13d772 100644
--- a/roles/dovecot/handlers/main.yml
+++ b/roles/dovecot/handlers/main.yml
@@ -2,3 +2,6 @@
   service:
       name: dovecot
       state: restarted
+
+- name: compile sieve
+  command: sievec /etc/dovecot/before.sieve
diff --git a/roles/dovecot/tasks/main.yml b/roles/dovecot/tasks/main.yml
index ff4215b..6ce0069 100644
--- a/roles/dovecot/tasks/main.yml
+++ b/roles/dovecot/tasks/main.yml
@@ -13,3 +13,11 @@
       dest: /etc/dovecot/dovecot.conf
   notify:
       - restart dovecot
+
+- name: sieve configuration file
+  copy:
+      src: ./files/before.sieve
+      dest: /etc/dovecot/before.sieve
+  notify:
+      - compile sieve
+      - restart dovecot