<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">It is triggering on your RBLs.<div class=""><br class=""></div><div class=""><br class=""></div><div class="">X-Moosebird-MailScanner-SpamCheck: spam, spamhaus-ZEN<br class=""><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">-</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Jerry Benton</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.mailborder.com" class="">www.mailborder.com</a></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Aug 6, 2015, at 12:16 PM, Howard Fleming <<a href="mailto:hfleming@moosebird.net" class="">hfleming@moosebird.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type" class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
<pre class="">Header info:</pre>
<a class="moz-txt-link-freetext" href="http://pastebin.com/FRpcJirk">http://pastebin.com/FRpcJirk</a><br class="">
<br class="">
<pre class="">Virtual domains are handled by postfix (and if this is not what you are looking for, please let me know):
main.cf:
virtual_alias_domains = hash:/etc/postfix/virtual_alias_domains
virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps
MTA is postfix.
Thanks,
Howard
</pre>
<br class="">
<br class="">
<br class="">
<br class="">
<div class="moz-cite-prefix">On 08/06/2015 11:41 AM, Jeremy
McSpadden wrote:<br class="">
</div>
<blockquote cite="mid:015F56AD-4756-4461-A3A6-D6D419D599DF@fluxlabs.net" type="cite" class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
<div class="">Pastebin the header of one of the emails. What are you using
for virtual domains ? What mta ?<br class="">
<br class="">
<div class="acompli_signature">
<div class="acompli_signature"><span style="background-color:
rgba(255, 255, 255, 0);" class="">--<br class="">
Jeremy McSpadden | Flux Labs<br class="">
Local - <a moz-do-not-send="true" href="tel:850-250-5590;501" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/1" class="">850-250-5590x501</a> |
Mobile - <a moz-do-not-send="true" href="tel:850-890-2543" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/2" class="">850-890-2543</a> <br class="">
Fax - <a moz-do-not-send="true" href="tel:850-254-2955" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/3" class="">850-254-2955</a> |
Toll Free - <a moz-do-not-send="true" href="tel:877-699-FLUX" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/4" class="">877-699-FLUX</a><br class="">
Web - <a moz-do-not-send="true" href="http://www.fluxlabs.net/" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="0/5" class="">http://www.fluxlabs.net</a></span></div>
<div class=""><br class="">
</div>
</div>
</div>
<div class=""><br class="">
On Aug 6, 2015, at 10:36 AM, Howard Fleming <<a moz-do-not-send="true" href="mailto:hfleming@moosebird.net" class="">hfleming@moosebird.net</a>>
wrote:<br class="">
<br class="">
</div>
<blockquote type="cite" class="">
<div class=""><span class="">Good morning,</span><br class="">
<span class=""></span><br class="">
<span class="">I am in the process of rebuilding my mail server and
running into a problem with any email sent from the 2
virtual domains on the system is being flagged as spam by
MailScanner (the other 2 domains that are not virtual is
working as it should). Other than the virtual domain
outgoing email being flagged as spam, everything appears to
be working as it should.</span><br class="">
<span class=""></span><br class="">
<span class="">Any suggestions on where to start looking and what
additional information I need to send here for
troubleshooting?</span><br class="">
<span class=""></span><br class="">
<span class="">System info:</span><br class="">
<span class=""></span><br class="">
<span class="">CentOS 6.6</span><br class="">
<span class="">Postfix version 2.6.6, Release 6.el6_5</span><br class="">
<span class=""></span><br class="">
<span class="">MailScanner -v</span><br class="">
<span class="">Running on</span><br class="">
<span class="">Linux <a moz-do-not-send="true" href="http://comm.moosebird.net/" class="">comm.moosebird.net</a>
2.6.32-504.30.3.el6.x86_64 #1 SMP Wed Jul 15 10:13:09 UTC
2015 x86_64 x86_64 x86_64 GNU/Linux</span><br class="">
<span class="">This is CentOS release 6.6 (Final)</span><br class="">
<span class="">This is Perl version 5.010001 (5.10.1)</span><br class="">
<span class=""></span><br class="">
<span class="">This is MailScanner version 4.85.2</span><br class="">
<span class="">Module versions are:</span><br class="">
<span class="">1.00 AnyDBM_File</span><br class="">
<span class="">1.30 Archive::Zip</span><br class="">
<span class="">0.23 bignum</span><br class="">
<span class="">1.11 Carp</span><br class="">
<span class="">2.021 Compress::Zlib</span><br class="">
<span class="">1.119 Convert::BinHex</span><br class="">
<span class="">0.17 Convert::TNEF</span><br class="">
<span class="">2.124 Data::Dumper</span><br class="">
<span class="">2.27 Date::Parse</span><br class="">
<span class="">1.03 DirHandle</span><br class="">
<span class="">1.06 Fcntl</span><br class="">
<span class="">2.77 File::Basename</span><br class="">
<span class="">2.14 File::Copy</span><br class="">
<span class="">2.02 FileHandle</span><br class="">
<span class="">2.08 File::Path</span><br class="">
<span class="">0.22 File::Temp</span><br class="">
<span class="">0.92 Filesys::Df</span><br class="">
<span class="">3.64 HTML::Entities</span><br class="">
<span class="">3.64 HTML::Parser</span><br class="">
<span class="">3.57 HTML::TokeParser</span><br class="">
<span class="">1.25 IO</span><br class="">
<span class="">1.14 IO::File</span><br class="">
<span class="">1.13 IO::Pipe</span><br class="">
<span class="">2.04 Mail::Header</span><br class="">
<span class="">1.9993 Math::BigInt</span><br class="">
<span class="">0.22 Math::BigRat</span><br class="">
<span class="">3.08 MIME::Base64</span><br class="">
<span class="">5.427 MIME::Decoder</span><br class="">
<span class="">5.427 MIME::Decoder::UU</span><br class="">
<span class="">5.427 MIME::Head</span><br class="">
<span class="">5.427 MIME::Parser</span><br class="">
<span class="">3.08 MIME::QuotedPrint</span><br class="">
<span class="">5.427 MIME::Tools</span><br class="">
<span class="">0.14 Net::CIDR</span><br class="">
<span class="">1.25 Net::IP</span><br class="">
<span class="">0.19 OLE::Storage_Lite</span><br class="">
<span class="">1.04 Pod::Escapes</span><br class="">
<span class="">3.13 Pod::Simple</span><br class="">
<span class="">1.17 POSIX</span><br class="">
<span class="">1.21 Scalar::Util</span><br class="">
<span class="">1.82 Socket</span><br class="">
<span class="">2.20 Storable</span><br class="">
<span class="">1.4 Sys::Hostname::Long</span><br class="">
<span class="">0.27 Sys::Syslog</span><br class="">
<span class="">1.40 Test::Pod</span><br class="">
<span class="">0.92 Test::Simple</span><br class="">
<span class="">1.9721 Time::HiRes</span><br class="">
<span class="">1.02 Time::localtime</span><br class="">
<span class=""></span><br class="">
<span class="">Optional module versions are:</span><br class="">
<span class="">1.58 Archive::Tar</span><br class="">
<span class="">0.23 bignum</span><br class="">
<span class="">missing Business::ISBN</span><br class="">
<span class="">missing Business::ISBN::Data</span><br class="">
<span class="">1.15 Data::Dump</span><br class="">
<span class="">1.82 DB_File</span><br class="">
<span class="">1.27 DBD::SQLite</span><br class="">
<span class="">1.609 DBI</span><br class="">
<span class="">1.16 Digest</span><br class="">
<span class="">1.01 Digest::HMAC</span><br class="">
<span class="">2.39 Digest::MD5</span><br class="">
<span class="">2.12 Digest::SHA1</span><br class="">
<span class="">1.01 Encode::Detect</span><br class="">
<span class="">0.17015 Error</span><br class="">
<span class="">0.27 ExtUtils::CBuilder</span><br class="">
<span class="">2.2203 ExtUtils::ParseXS</span><br class="">
<span class="">2.38 Getopt::Long</span><br class="">
<span class="">0.46 Inline</span><br class="">
<span class="">1.08 IO::String</span><br class="">
<span class="">1.09 IO::Zlib</span><br class="">
<span class="">2.28 IP::Country</span><br class="">
<span class="">0.29 Mail::ClamAV</span><br class="">
<span class="">3.003001 Mail::SpamAssassin</span><br class="">
<span class="">v2.008 Mail::SPF</span><br class="">
<span class="">1.999001 Mail::SPF::Query</span><br class="">
<span class="">0.35 Module::Build</span><br class="">
<span class="">0.21 Net::CIDR::Lite</span><br class="">
<span class="">0.65 Net::DNS</span><br class="">
<span class="">v0.003 Net::DNS::Resolver::Programmable</span><br class="">
<span class="">0.65 Net::LDAP</span><br class="">
<span class="">4.027 NetAddr::IP</span><br class="">
<span class="">1.965001 Parse::RecDescent</span><br class="">
<span class="">missing SAVI</span><br class="">
<span class="">3.17 Test::Harness</span><br class="">
<span class="">1.22 Test::Manifest</span><br class="">
<span class="">2.0.0 Text::Balanced</span><br class="">
<span class="">1.40 URI</span><br class="">
<span class="">0.77 version</span><br class="">
<span class="">missing YAML</span><br class="">
<span class=""></span><br class="">
<span class=""></span><br class="">
<span class="">MailScanner --lint</span><br class="">
<span class="">Trying to setlogsock(unix)</span><br class="">
<span class=""></span><br class="">
<span class="">Reading configuration file
/etc/MailScanner/MailScanner.conf</span><br class="">
<span class="">Reading configuration file
/etc/MailScanner/conf.d/README</span><br class="">
<span class="">Read 462 hostnames from the phishing whitelist</span><br class="">
<span class="">Read 12121 hostnames from the phishing blacklists</span><br class="">
<span class=""></span><br class="">
<span class="">Checking version numbers...</span><br class="">
<span class="">Version number in MailScanner.conf (4.85.2) is correct.</span><br class="">
<span class=""></span><br class="">
<span class="">Your envelope_sender_header in spam.assassin.prefs.conf
is correct.</span><br class="">
<span class="">MailScanner setting GID to (89)</span><br class="">
<span class="">MailScanner setting UID to (89)</span><br class="">
<span class=""></span><br class="">
<span class="">Checking for SpamAssassin errors (if you use it)...</span><br class="">
<span class="">Using SpamAssassin results cache</span><br class="">
<span class="">Connected to SpamAssassin cache database</span><br class="">
<span class="">SpamAssassin reported no errors.</span><br class="">
<span class="">Connected to Processing Attempts Database</span><br class="">
<span class="">Created Processing Attempts Database successfully</span><br class="">
<span class="">There are 0 messages in the Processing Attempts Database</span><br class="">
<span class="">Using locktype = posix</span><br class="">
<span class="">MailScanner.conf says "Virus Scanners = clamd"</span><br class="">
<span class="">Found these virus scanners installed: clamavmodule,
clamd</span><br class="">
<span class="">===========================================================================</span><br class="">
<span class="">Filename Checks: Windows/DOS Executable (1 <a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a>)</span><br class="">
<span class="">Other Checks: Found 1 problems</span><br class="">
<span class="">Virus and Content Scanning: Starting</span><br class="">
<span class="">Clamd::INFECTED:: Eicar-Test-Signature :: ./1/<a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a></span><br class="">
<span class="">Virus Scanning: Clamd found 2 infections</span><br class="">
<span class="">Infected message 1 came from 10.1.1.1</span><br class="">
<span class="">Virus Scanning: Found 2 viruses</span><br class="">
<span class="">===========================================================================</span><br class="">
<span class="">Virus Scanner test reports:</span><br class="">
<span class="">Clamd said "<a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a> was infected:
Eicar-Test-Signature"</span><br class="">
<span class=""></span><br class="">
<span class="">If any of your virus scanners (clamavmodule,clamd)</span><br class="">
<span class="">are not listed there, you should check that they are
installed correctly</span><br class="">
<span class="">and that MailScanner is finding them correctly via its
virus.scanners.conf.</span><br class="">
<span class=""></span><br class="">
<span class="">Thanks for any help,</span><br class="">
<span class="">Howard</span><br class="">
<span class=""></span><br class="">
<span class=""></span><br class="">
<span class=""></span><br class="">
<span class=""></span><br class="">
<span class="">-- </span><br class="">
<span class="">MailScanner mailing list</span><br class="">
<span class=""><a moz-do-not-send="true" href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a></span><br class="">
<span class=""><a moz-do-not-send="true" href="http://lists.mailscanner.info/listinfo/mailscanner" class="">http://lists.mailscanner.info/listinfo/mailscanner</a></span><br class="">
<span class=""></span><br class="">
</div>
</blockquote>
<br class="">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br class="">
<pre wrap="" class="">
</pre>
</blockquote>
<br class="">
</div>
<br class=""><br class="">-- <br class="">MailScanner mailing list<br class=""><a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><br class="">http://lists.mailscanner.info/listinfo/mailscanner<br class=""><br class=""></div></blockquote></div><br class=""></div></body></html>