<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">It is triggering  on your RBLs.<div class=""><br class=""></div><div class=""><br class=""></div><div class="">X-Moosebird-MailScanner-SpamCheck: spam, spamhaus-ZEN<br class=""><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">-</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Jerry Benton</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.mailborder.com" class="">www.mailborder.com</a></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Aug 6, 2015, at 12:16 PM, Howard Fleming <<a href="mailto:hfleming@moosebird.net" class="">hfleming@moosebird.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
  
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type" class="">
  
  <div bgcolor="#FFFFFF" text="#000000" class="">
    <pre class="">Header info:</pre>
    <a class="moz-txt-link-freetext" href="http://pastebin.com/FRpcJirk">http://pastebin.com/FRpcJirk</a><br class="">
    <br class="">
    <pre class="">Virtual domains are handled by postfix (and if this is not what you are looking for, please let me know):

main.cf:
virtual_alias_domains = hash:/etc/postfix/virtual_alias_domains
virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps

MTA is postfix.

Thanks,
Howard

</pre>
    <br class="">
    <br class="">
    <br class="">
    <br class="">
    <div class="moz-cite-prefix">On 08/06/2015 11:41 AM, Jeremy
      McSpadden wrote:<br class="">
    </div>
    <blockquote cite="mid:015F56AD-4756-4461-A3A6-D6D419D599DF@fluxlabs.net" type="cite" class="">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
      <div class="">Pastebin the header of one of the emails. What are you using
        for virtual domains ? What mta ?<br class="">
        <br class="">
        <div class="acompli_signature">
          <div class="acompli_signature"><span style="background-color:
              rgba(255, 255, 255, 0);" class="">--<br class="">
              Jeremy McSpadden | Flux Labs<br class="">
              Local - <a moz-do-not-send="true" href="tel:850-250-5590;501" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/1" class="">850-250-5590x501</a> |
              Mobile - <a moz-do-not-send="true" href="tel:850-890-2543" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/2" class="">850-890-2543</a> <br class="">
              Fax - <a moz-do-not-send="true" href="tel:850-254-2955" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/3" class="">850-254-2955</a> |
              Toll Free - <a moz-do-not-send="true" href="tel:877-699-FLUX" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/4" class="">877-699-FLUX</a><br class="">
              Web - <a moz-do-not-send="true" href="http://www.fluxlabs.net/" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="0/5" class="">http://www.fluxlabs.net</a></span></div>
          <div class=""><br class="">
          </div>
        </div>
      </div>
      <div class=""><br class="">
        On Aug 6, 2015, at 10:36 AM, Howard Fleming <<a moz-do-not-send="true" href="mailto:hfleming@moosebird.net" class="">hfleming@moosebird.net</a>>
        wrote:<br class="">
        <br class="">
      </div>
      <blockquote type="cite" class="">
        <div class=""><span class="">Good morning,</span><br class="">
          <span class=""></span><br class="">
          <span class="">I am in the process of rebuilding my mail server and
            running into a problem with any email sent from the 2
            virtual domains on the system is being flagged as spam by
            MailScanner (the other 2 domains that are not virtual is
            working as it should).  Other than the virtual domain
            outgoing email being flagged as spam, everything appears to
            be working as it should.</span><br class="">
          <span class=""></span><br class="">
          <span class="">Any suggestions on where to start looking and what
            additional information I need to send here for
            troubleshooting?</span><br class="">
          <span class=""></span><br class="">
          <span class="">System info:</span><br class="">
          <span class=""></span><br class="">
          <span class="">CentOS 6.6</span><br class="">
          <span class="">Postfix version 2.6.6, Release 6.el6_5</span><br class="">
          <span class=""></span><br class="">
          <span class="">MailScanner -v</span><br class="">
          <span class="">Running on</span><br class="">
          <span class="">Linux <a moz-do-not-send="true" href="http://comm.moosebird.net/" class="">comm.moosebird.net</a>
            2.6.32-504.30.3.el6.x86_64 #1 SMP Wed Jul 15 10:13:09 UTC
            2015 x86_64 x86_64 x86_64 GNU/Linux</span><br class="">
          <span class="">This is CentOS release 6.6 (Final)</span><br class="">
          <span class="">This is Perl version 5.010001 (5.10.1)</span><br class="">
          <span class=""></span><br class="">
          <span class="">This is MailScanner version 4.85.2</span><br class="">
          <span class="">Module versions are:</span><br class="">
          <span class="">1.00    AnyDBM_File</span><br class="">
          <span class="">1.30    Archive::Zip</span><br class="">
          <span class="">0.23    bignum</span><br class="">
          <span class="">1.11    Carp</span><br class="">
          <span class="">2.021   Compress::Zlib</span><br class="">
          <span class="">1.119   Convert::BinHex</span><br class="">
          <span class="">0.17    Convert::TNEF</span><br class="">
          <span class="">2.124   Data::Dumper</span><br class="">
          <span class="">2.27    Date::Parse</span><br class="">
          <span class="">1.03    DirHandle</span><br class="">
          <span class="">1.06    Fcntl</span><br class="">
          <span class="">2.77    File::Basename</span><br class="">
          <span class="">2.14    File::Copy</span><br class="">
          <span class="">2.02    FileHandle</span><br class="">
          <span class="">2.08    File::Path</span><br class="">
          <span class="">0.22    File::Temp</span><br class="">
          <span class="">0.92    Filesys::Df</span><br class="">
          <span class="">3.64    HTML::Entities</span><br class="">
          <span class="">3.64    HTML::Parser</span><br class="">
          <span class="">3.57    HTML::TokeParser</span><br class="">
          <span class="">1.25    IO</span><br class="">
          <span class="">1.14    IO::File</span><br class="">
          <span class="">1.13    IO::Pipe</span><br class="">
          <span class="">2.04    Mail::Header</span><br class="">
          <span class="">1.9993  Math::BigInt</span><br class="">
          <span class="">0.22    Math::BigRat</span><br class="">
          <span class="">3.08    MIME::Base64</span><br class="">
          <span class="">5.427   MIME::Decoder</span><br class="">
          <span class="">5.427   MIME::Decoder::UU</span><br class="">
          <span class="">5.427   MIME::Head</span><br class="">
          <span class="">5.427   MIME::Parser</span><br class="">
          <span class="">3.08    MIME::QuotedPrint</span><br class="">
          <span class="">5.427   MIME::Tools</span><br class="">
          <span class="">0.14    Net::CIDR</span><br class="">
          <span class="">1.25    Net::IP</span><br class="">
          <span class="">0.19    OLE::Storage_Lite</span><br class="">
          <span class="">1.04    Pod::Escapes</span><br class="">
          <span class="">3.13    Pod::Simple</span><br class="">
          <span class="">1.17    POSIX</span><br class="">
          <span class="">1.21    Scalar::Util</span><br class="">
          <span class="">1.82    Socket</span><br class="">
          <span class="">2.20    Storable</span><br class="">
          <span class="">1.4     Sys::Hostname::Long</span><br class="">
          <span class="">0.27    Sys::Syslog</span><br class="">
          <span class="">1.40    Test::Pod</span><br class="">
          <span class="">0.92    Test::Simple</span><br class="">
          <span class="">1.9721  Time::HiRes</span><br class="">
          <span class="">1.02    Time::localtime</span><br class="">
          <span class=""></span><br class="">
          <span class="">Optional module versions are:</span><br class="">
          <span class="">1.58    Archive::Tar</span><br class="">
          <span class="">0.23    bignum</span><br class="">
          <span class="">missing Business::ISBN</span><br class="">
          <span class="">missing Business::ISBN::Data</span><br class="">
          <span class="">1.15    Data::Dump</span><br class="">
          <span class="">1.82    DB_File</span><br class="">
          <span class="">1.27    DBD::SQLite</span><br class="">
          <span class="">1.609   DBI</span><br class="">
          <span class="">1.16    Digest</span><br class="">
          <span class="">1.01    Digest::HMAC</span><br class="">
          <span class="">2.39    Digest::MD5</span><br class="">
          <span class="">2.12    Digest::SHA1</span><br class="">
          <span class="">1.01    Encode::Detect</span><br class="">
          <span class="">0.17015 Error</span><br class="">
          <span class="">0.27    ExtUtils::CBuilder</span><br class="">
          <span class="">2.2203  ExtUtils::ParseXS</span><br class="">
          <span class="">2.38    Getopt::Long</span><br class="">
          <span class="">0.46    Inline</span><br class="">
          <span class="">1.08    IO::String</span><br class="">
          <span class="">1.09    IO::Zlib</span><br class="">
          <span class="">2.28    IP::Country</span><br class="">
          <span class="">0.29    Mail::ClamAV</span><br class="">
          <span class="">3.003001        Mail::SpamAssassin</span><br class="">
          <span class="">v2.008  Mail::SPF</span><br class="">
          <span class="">1.999001        Mail::SPF::Query</span><br class="">
          <span class="">0.35    Module::Build</span><br class="">
          <span class="">0.21    Net::CIDR::Lite</span><br class="">
          <span class="">0.65    Net::DNS</span><br class="">
          <span class="">v0.003  Net::DNS::Resolver::Programmable</span><br class="">
          <span class="">0.65    Net::LDAP</span><br class="">
          <span class="">4.027  NetAddr::IP</span><br class="">
          <span class="">1.965001        Parse::RecDescent</span><br class="">
          <span class="">missing SAVI</span><br class="">
          <span class="">3.17    Test::Harness</span><br class="">
          <span class="">1.22    Test::Manifest</span><br class="">
          <span class="">2.0.0   Text::Balanced</span><br class="">
          <span class="">1.40    URI</span><br class="">
          <span class="">0.77    version</span><br class="">
          <span class="">missing YAML</span><br class="">
          <span class=""></span><br class="">
          <span class=""></span><br class="">
          <span class="">MailScanner --lint</span><br class="">
          <span class="">Trying to setlogsock(unix)</span><br class="">
          <span class=""></span><br class="">
          <span class="">Reading configuration file
            /etc/MailScanner/MailScanner.conf</span><br class="">
          <span class="">Reading configuration file
            /etc/MailScanner/conf.d/README</span><br class="">
          <span class="">Read 462 hostnames from the phishing whitelist</span><br class="">
          <span class="">Read 12121 hostnames from the phishing blacklists</span><br class="">
          <span class=""></span><br class="">
          <span class="">Checking version numbers...</span><br class="">
          <span class="">Version number in MailScanner.conf (4.85.2) is correct.</span><br class="">
          <span class=""></span><br class="">
          <span class="">Your envelope_sender_header in spam.assassin.prefs.conf
            is correct.</span><br class="">
          <span class="">MailScanner setting GID to  (89)</span><br class="">
          <span class="">MailScanner setting UID to  (89)</span><br class="">
          <span class=""></span><br class="">
          <span class="">Checking for SpamAssassin errors (if you use it)...</span><br class="">
          <span class="">Using SpamAssassin results cache</span><br class="">
          <span class="">Connected to SpamAssassin cache database</span><br class="">
          <span class="">SpamAssassin reported no errors.</span><br class="">
          <span class="">Connected to Processing Attempts Database</span><br class="">
          <span class="">Created Processing Attempts Database successfully</span><br class="">
          <span class="">There are 0 messages in the Processing Attempts Database</span><br class="">
          <span class="">Using locktype = posix</span><br class="">
          <span class="">MailScanner.conf says "Virus Scanners = clamd"</span><br class="">
          <span class="">Found these virus scanners installed: clamavmodule,
            clamd</span><br class="">
          <span class="">===========================================================================</span><br class="">
          <span class="">Filename Checks: Windows/DOS Executable (1 <a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a>)</span><br class="">
          <span class="">Other Checks: Found 1 problems</span><br class="">
          <span class="">Virus and Content Scanning: Starting</span><br class="">
          <span class="">Clamd::INFECTED:: Eicar-Test-Signature :: ./1/<a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a></span><br class="">
          <span class="">Virus Scanning: Clamd found 2 infections</span><br class="">
          <span class="">Infected message 1 came from 10.1.1.1</span><br class="">
          <span class="">Virus Scanning: Found 2 viruses</span><br class="">
          <span class="">===========================================================================</span><br class="">
          <span class="">Virus Scanner test reports:</span><br class="">
          <span class="">Clamd said "<a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a> was infected:
            Eicar-Test-Signature"</span><br class="">
          <span class=""></span><br class="">
          <span class="">If any of your virus scanners (clamavmodule,clamd)</span><br class="">
          <span class="">are not listed there, you should check that they are
            installed correctly</span><br class="">
          <span class="">and that MailScanner is finding them correctly via its
            virus.scanners.conf.</span><br class="">
          <span class=""></span><br class="">
          <span class="">Thanks for any help,</span><br class="">
          <span class="">Howard</span><br class="">
          <span class=""></span><br class="">
          <span class=""></span><br class="">
          <span class=""></span><br class="">
          <span class=""></span><br class="">
          <span class="">-- </span><br class="">
          <span class="">MailScanner mailing list</span><br class="">
          <span class=""><a moz-do-not-send="true" href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a></span><br class="">
          <span class=""><a moz-do-not-send="true" href="http://lists.mailscanner.info/listinfo/mailscanner" class="">http://lists.mailscanner.info/listinfo/mailscanner</a></span><br class="">
          <span class=""></span><br class="">
        </div>
      </blockquote>
      <br class="">
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br class="">
      <pre wrap="" class="">
</pre>
    </blockquote>
    <br class="">
  </div>

<br class=""><br class="">-- <br class="">MailScanner mailing list<br class=""><a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><br class="">http://lists.mailscanner.info/listinfo/mailscanner<br class=""><br class=""></div></blockquote></div><br class=""></div></body></html>