User unknown in virtual alias table

[Rodney Green]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Martin,

Any ideas on what the problem might be?

Thanks again,
Rodney

Rodney Green wrote:
> Martin,
>
> The MX record resolves to mail2.trayerproducts.com.
> mail2.trayerproducts.com resolves to the same IP address as
> mail4.trayerproducts.com. Really odd that it's bouncing mail to my
> address when it's delivered normally when it's not spam. I just don't
> get it.
>
> Thanks for your help,
> Rodney
>
>
> Martin Hepworth wrote:
>
>> Rodney
>>
>> what does the MS machine think the MX record for trayerproducts.com is?
>> It looks like its routing the forward to itself, and not finding
>> rgreen at trayerproducts.com and producing the bounce then.
>>
>>
>>
>> --
>> Martin Hepworth
>> Snr Systems Administrator
>> Solid State Logic
>> Tel: +44 (0)1865 842300
>>
>>
>> Rodney Green wrote:
>>
>>> Martin, Derek,
>>>
>>> I did suspect that maybe there was a problem with the forward I use in
>>> the spam and high scoring spam actions. I simply used my e-mail address,
>>> rgreen at trayerproducts.com. I just did a test by setting the actions to
>>> deliver and the bounce problem went away. I just set the action to
>>> forward again and this time I modified my e-mail address to be
>>> rgreen at mail4.trayerproducts.com and it's working okay now. Here are my
>>> logs (below message), and they do show that it is a postfix problem. Any
>>> ideas on what I might have configured incorrectly?
>>>
>>> Thanks for your help,
>>> Rod
>>>
>>> Mar  8 08:43:50 proxy MailScanner[16793]: Message 97DF93132C.95381 from
>>> 206.190.38.213 (reason1000 at yahoo.com) to
>>> trayerproducts.com,mail4.trayerproducts.com is spam, SpamAssassin
>>> (score=997.401, required 5, autolearn=not spam, BAYES_00 -2.60, GTUBE
>>> 1000.00)
>>> Mar  8 08:43:52 proxy MailScanner[16793]: Spam Checks: Found 1 spam
>>> messages
>>> Mar  8 08:43:52 proxy MailScanner[16793]: Spam Actions: message
>>> 97DF93132C.95381 actions are store,forward,rgreen at trayerproducts.com
>>> Mar  8 08:43:52 proxy MailScanner[16793]: Virus and Content Scanning:
>>> Starting
>>> Mar  8 08:43:52 proxy MailScanner[16793]: Requeue: 97DF93132C.95381 to
>>> 832783132D
>>> Mar  8 08:43:52 proxy postfix/qmgr[16765]: 832783132D:
>>> from=<reason1000 at yahoo.com>, size=1640, nrcpt=1 (queue active)
>>> Mar  8 08:43:53 proxy MailScanner[16793]: Uninfected: Delivered 1
>>> messages
>>> Mar  8 08:43:53 proxy postfix/error[17012]: 832783132D:
>>> to=<rgreen at trayerproducts.com>, orig_to=<unknown>, relay=none, delay=6,
>>> status=bounced (user unknown in virtual alias table)
>>>
>>>
>>> Martin Hepworth wrote:
>>>
>>>> Rodney
>>>>
>>>> anything in the log files for this test message? Like is MS processing
>>>> it at all or is PF rejecting it?
>>>>
>>>> --
>>>> Martin Hepworth
>>>> Snr Systems Administrator
>>>> Solid State Logic
>>>> Tel: +44 (0)1865 842300
>>>>
>>>>
>>>> Rodney Green wrote:
>>>>
>>>>> MailScanner 4.37.7-1
>>>>> SpamAssassin 3.0.2
>>>>> Postfix 2.0.20
>>>>>
>>>>> Hello,
>>>>>
>>>>> I've just moved mail services from a server running older versions of
>>>>> the above software to the newer versions listed. In testing, I've
>>>>> noticed something that seems odd to me. When I send a message to my
>>>>> address from yahoo with the gtube spam testing string, my mail server
>>>>> sends back an error message saying "user unknown in virtual alias
>>>>> table." The user (myself) is definitely in the virtual alias table and
>>>>> receiving mail just fine. When I send normal mail from my yahoo
>>>>> account
>>>>> it is delivered without any problems.
>>>>>
>>>>> Anyone have any idea what's happening here? Is there some kind of
>>>>> feature in MS or SA that is sending back a "user unknown" error to
>>>>> trick
>>>>> spammers into taking the address of their list?
>>>>>
>>>>> Thanks!
>>>>> Rod
>>>>>
>>>>> ------------------------ MailScanner list ------------------------
>>>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>>> 'leave mailscanner' in the body of the email.
>>>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>>
>>>>> Support MailScanner development - buy the book off the website!
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> **********************************************************************
>>>>
>>>> This email and any files transmitted with it are confidential and
>>>> intended solely for the use of the individual or entity to whom they
>>>> are addressed. If you have received this email in error please notify
>>>> the system manager.
>>>>
>>>> This footnote confirms that this email message has been swept
>>>> for the presence of computer viruses and is believed to be clean.
>>>>
>>>> **********************************************************************
>>>>
>>>> ------------------------ MailScanner list ------------------------
>>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>>> 'leave mailscanner' in the body of the email.
>>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>>
>>>
>>> --
>>> Rodney Green
>>> Network/Security Administrator
>>> Trayer Products, Inc.
>>> E-Mail: rgreen at trayerproducts.com
>>> Phone: 607-734-8124 Ext. 343
>>>
>>> ------------------------ MailScanner list ------------------------
>>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>> 'leave mailscanner' in the body of the email.
>>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>>
>>> Support MailScanner development - buy the book off the website!
>>
>>
>>
>> **********************************************************************
>>
>> This email and any files transmitted with it are confidential and
>> intended solely for the use of the individual or entity to whom they
>> are addressed. If you have received this email in error please notify
>> the system manager.
>>
>> This footnote confirms that this email message has been swept
>> for the presence of computer viruses and is believed to be clean.
>>
>> **********************************************************************
>>
>> ------------------------ MailScanner list ------------------------
>> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>> 'leave mailscanner' in the body of the email.
>> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>> Support MailScanner development - buy the book off the website!
>>
>
> --
> Rodney Green
> Network/Security Administrator
> Trayer Products, Inc.
> E-Mail: rgreen at trayerproducts.com
> Phone: 607-734-8124 Ext. 343
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

--
Rodney Green
Network/Security Administrator
Trayer Products, Inc.
E-Mail: rgreen at trayerproducts.com
Phone: 607-734-8124 Ext. 343

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!