ruleset=check_rcpt

[Spicer, Kevin]

> I've disabled all rulesets in my /etc/MailScanner.conf file 
> and for some
> reason I'm getting ruleset=check_rcpt message in my maillog file.
> Why am I getting this error?
> 
> Jan  7 14:36:01 tonka sendmail[27109]: h07Ja1cc027109: 
> ruleset=check_rcpt,
> arg1=<xxx at symcor.com>, relay=ns.xxx.com [xxx.xxx.12.xx] (may 
> be forged),
> reject=550 5.7.1 <xxx at symcor.com>... Relaying denied. IP name possibly
> forged [xxx.xxx.12.xx]
> 

Thats a sendmail error, nothing to do with MailScanner.  Its not clear from your obfuscated headers why, or whether this is a genuine message or some unauthorised person trying to relay through your server.