Losing My IP

[Ed Bruce]

We've been rapidly virtualizing many severs, all Windows based. Finally 
decided its time to virtualize a Linux server so we chose our email 
gateways. Not a lot of load or disk activity. Ran the VMWare p2v client 
and we were good to go or at least I thought so. With all the image spam 
we've been hit with I installed Sanesecurity, which has greatly helped 
reduce it, but is getting a few false positives. As best I can tell any 
rules that reference IP address, say 127.0.0.1 don't get applied because 
it appears that MailScanner is seeing all email as coming from 0.0.0.0.

Any ideas what I need to fix to get back my IP.

May 29 09:08:48 mail4 postfix/smtpd[14688]: 722F085EC5: 
client=mail1.hpmich.com[*192.168.30.72*]
May 29 09:09:24 mail4 postfix/cleanup[15443]: 722F085EC5: hold: header 
Received: from mail1.hpmich.com (mail1.hpmich.com [192.168.30.72])??by 
mail4.hpmich.com (Postfix) with ESMTP id 722F085EC5??for 
<ebruce at hpmich.com>; Fri, 29 May 2009 09:08:38 -0400 (EDT) from 
mail1.hpmich.com[192.168.30.72]; from=<ebruce at hpmich.com> 
to=<ebruce at hpmich.com> proto=ESMTP helo=<mail1.hpmich.com>
May 29 09:09:24 mail4 postfix/cleanup[15443]: 722F085EC5: 
message-id=<20090529130848.722F085EC5 at mail4.hpmich.com>
May 29 09:09:24 mail4 MailScanner[13338]: Saved archive copies of 
722F085EC5.AF247
May 29 09:09:25 mail4 MailScanner[13338]: Message 722F085EC5.AF247 from 
*0.0.0.0* (ebruce at hpmich.com) to hpmich.com is not spam, SpamAssassin 
(not cached, score=1.836, required 5.3, AWL -0.81, BAYES_50 2.65)
May 29 09:09:29 mail4 MailScanner[13338]: Requeue: 722F085EC5.AF247 to 
DFE4F85EC6
May 29 09:09:29 mail4 MailScanner[13338]: Logging message 
722F085EC5.AF247 to SQL
May 29 09:09:29 mail4 MailScanner[13341]: 722F085EC5.AF247: Logged to 
MailWatch SQL
May 29 09:09:29 mail4 postfix/smtp[16039]: DFE4F85EC6: 
to=<ebruce at hpmich.com>, relay=x.x.x[x.x.x.x]:25, delay=51, 
delays=51/0/0/0.01, dsn=2.6.0, status=sent (250 2.6.0  
<20090529130848.722F085EC5 at mail4.hpmich.com> Queued mail for delivery)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090529/ec567213/attachment.html