<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">This is a MailScanner configuration issue. <div class=""><br class=""></div><div class=""><a href="https://www.mailscanner.info/MailScanner.conf.index.html#Spam%20Lists%20To%20Be%20Spam" class="">https://www.mailscanner.info/MailScanner.conf.index.html#Spam Lists To Be Spam</a><br class=""><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">-</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Jerry Benton</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.mailborder.com" class="">www.mailborder.com</a></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Aug 6, 2015, at 12:41 PM, Howard Fleming <<a href="mailto:hfleming@moosebird.net" class="">hfleming@moosebird.net</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
  
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type" class="">
  
  <div bgcolor="#FFFFFF" text="#000000" class="">
    Hi Jerry,<br class="">
    <br class="">
    This is probably under the heading of a newbie question, but how do
    I go about fixing this?<br class="">
    <br class="">
    It appears spamhaus is picking up the ip address of the email client
    sending the the email, since it is being delivered locally on the
    server.  I assume this is a postfix configuration issue?<br class="">
    <br class="">
    Thanks,<br class="">
    Howard<br class="">
    <br class="">
    <br class="">
    <div class="moz-cite-prefix">On 08/06/2015 12:18 PM, Jerry Benton
      wrote:<br class="">
    </div>
    <blockquote cite="mid:B774249B-5F05-4BA3-9C30-D16D18DEF0ED@mailborder.com" type="cite" class="">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
      It is triggering  on your RBLs.
      <div class=""><br class="">
      </div>
      <div class=""><br class="">
      </div>
      <div class="">X-Moosebird-MailScanner-SpamCheck: spam,
        spamhaus-ZEN<br class="">
        <div apple-content-edited="true" class="">
          <div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">
            -</div>
          <div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Jerry
            Benton</div>
          <div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a moz-do-not-send="true" href="http://www.mailborder.com/" class="">www.mailborder.com</a></div>
          <div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="">
          </div>
          <br class="Apple-interchange-newline">
        </div>
        <br class="">
        <div class="">
          <blockquote type="cite" class="">
            <div class="">On Aug 6, 2015, at 12:16 PM, Howard Fleming
              <<a moz-do-not-send="true" href="mailto:hfleming@moosebird.net" class="">hfleming@moosebird.net</a>>
              wrote:</div>
            <br class="Apple-interchange-newline">
            <div class="">
              <meta content="text/html; charset=utf-8" http-equiv="Content-Type" class="">
              <div bgcolor="#FFFFFF" text="#000000" class="">
                <pre class="">Header info:</pre>
                <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://pastebin.com/FRpcJirk">http://pastebin.com/FRpcJirk</a><br class="">
                <br class="">
                <pre class="">Virtual domains are handled by postfix (and if this is not what you are looking for, please let me know):

main.cf:
virtual_alias_domains = hash:/etc/postfix/virtual_alias_domains
virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps

MTA is postfix.

Thanks,
Howard

</pre>
                <br class="">
                <br class="">
                <br class="">
                <br class="">
                <div class="moz-cite-prefix">On 08/06/2015 11:41 AM,
                  Jeremy McSpadden wrote:<br class="">
                </div>
                <blockquote cite="mid:015F56AD-4756-4461-A3A6-D6D419D599DF@fluxlabs.net" type="cite" class="">
                  <meta http-equiv="Content-Type" content="text/html;
                    charset=utf-8" class="">
                  <div class="">Pastebin the header of one of the
                    emails. What are you using for virtual domains ?
                    What mta ?<br class="">
                    <br class="">
                    <div class="acompli_signature">
                      <div class="acompli_signature"><span style="background-color: rgba(255, 255, 255,
                          0);" class="">--<br class="">
                          Jeremy McSpadden | Flux Labs<br class="">
                          Local - <a moz-do-not-send="true" href="tel:850-250-5590;501" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/1" class="">850-250-5590x501</a> |

                          Mobile - <a moz-do-not-send="true" href="tel:850-890-2543" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/2" class="">850-890-2543</a> <br class="">
                          Fax - <a moz-do-not-send="true" href="tel:850-254-2955" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/3" class="">850-254-2955</a> |

                          Toll Free - <a moz-do-not-send="true" href="tel:877-699-FLUX" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0/4" class="">877-699-FLUX</a><br class="">
                          Web - <a moz-do-not-send="true" href="http://www.fluxlabs.net/" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="0/5" class="">http://www.fluxlabs.net</a></span></div>
                      <div class=""><br class="">
                      </div>
                    </div>
                  </div>
                  <div class=""><br class="">
                    On Aug 6, 2015, at 10:36 AM, Howard Fleming <<a moz-do-not-send="true" href="mailto:hfleming@moosebird.net" class="">hfleming@moosebird.net</a>>

                    wrote:<br class="">
                    <br class="">
                  </div>
                  <blockquote type="cite" class="">
                    <div class=""><span class="">Good morning,</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">I am in the process of rebuilding
                        my mail server and running into a problem with
                        any email sent from the 2 virtual domains on the
                        system is being flagged as spam by MailScanner
                        (the other 2 domains that are not virtual is
                        working as it should).  Other than the virtual
                        domain outgoing email being flagged as spam,
                        everything appears to be working as it should.</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">Any suggestions on where to start
                        looking and what additional information I need
                        to send here for troubleshooting?</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">System info:</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">CentOS 6.6</span><br class="">
                      <span class="">Postfix version 2.6.6, Release
                        6.el6_5</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">MailScanner -v</span><br class="">
                      <span class="">Running on</span><br class="">
                      <span class="">Linux <a moz-do-not-send="true" href="http://comm.moosebird.net/" class="">comm.moosebird.net</a>
                        2.6.32-504.30.3.el6.x86_64 #1 SMP Wed Jul 15
                        10:13:09 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux</span><br class="">
                      <span class="">This is CentOS release 6.6 (Final)</span><br class="">
                      <span class="">This is Perl version 5.010001
                        (5.10.1)</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">This is MailScanner version 4.85.2</span><br class="">
                      <span class="">Module versions are:</span><br class="">
                      <span class="">1.00    AnyDBM_File</span><br class="">
                      <span class="">1.30    Archive::Zip</span><br class="">
                      <span class="">0.23    bignum</span><br class="">
                      <span class="">1.11    Carp</span><br class="">
                      <span class="">2.021   Compress::Zlib</span><br class="">
                      <span class="">1.119   Convert::BinHex</span><br class="">
                      <span class="">0.17    Convert::TNEF</span><br class="">
                      <span class="">2.124   Data::Dumper</span><br class="">
                      <span class="">2.27    Date::Parse</span><br class="">
                      <span class="">1.03    DirHandle</span><br class="">
                      <span class="">1.06    Fcntl</span><br class="">
                      <span class="">2.77    File::Basename</span><br class="">
                      <span class="">2.14    File::Copy</span><br class="">
                      <span class="">2.02    FileHandle</span><br class="">
                      <span class="">2.08    File::Path</span><br class="">
                      <span class="">0.22    File::Temp</span><br class="">
                      <span class="">0.92    Filesys::Df</span><br class="">
                      <span class="">3.64    HTML::Entities</span><br class="">
                      <span class="">3.64    HTML::Parser</span><br class="">
                      <span class="">3.57    HTML::TokeParser</span><br class="">
                      <span class="">1.25    IO</span><br class="">
                      <span class="">1.14    IO::File</span><br class="">
                      <span class="">1.13    IO::Pipe</span><br class="">
                      <span class="">2.04    Mail::Header</span><br class="">
                      <span class="">1.9993  Math::BigInt</span><br class="">
                      <span class="">0.22    Math::BigRat</span><br class="">
                      <span class="">3.08    MIME::Base64</span><br class="">
                      <span class="">5.427   MIME::Decoder</span><br class="">
                      <span class="">5.427   MIME::Decoder::UU</span><br class="">
                      <span class="">5.427   MIME::Head</span><br class="">
                      <span class="">5.427   MIME::Parser</span><br class="">
                      <span class="">3.08    MIME::QuotedPrint</span><br class="">
                      <span class="">5.427   MIME::Tools</span><br class="">
                      <span class="">0.14    Net::CIDR</span><br class="">
                      <span class="">1.25    Net::IP</span><br class="">
                      <span class="">0.19    OLE::Storage_Lite</span><br class="">
                      <span class="">1.04    Pod::Escapes</span><br class="">
                      <span class="">3.13    Pod::Simple</span><br class="">
                      <span class="">1.17    POSIX</span><br class="">
                      <span class="">1.21    Scalar::Util</span><br class="">
                      <span class="">1.82    Socket</span><br class="">
                      <span class="">2.20    Storable</span><br class="">
                      <span class="">1.4     Sys::Hostname::Long</span><br class="">
                      <span class="">0.27    Sys::Syslog</span><br class="">
                      <span class="">1.40    Test::Pod</span><br class="">
                      <span class="">0.92    Test::Simple</span><br class="">
                      <span class="">1.9721  Time::HiRes</span><br class="">
                      <span class="">1.02    Time::localtime</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">Optional module versions are:</span><br class="">
                      <span class="">1.58    Archive::Tar</span><br class="">
                      <span class="">0.23    bignum</span><br class="">
                      <span class="">missing Business::ISBN</span><br class="">
                      <span class="">missing Business::ISBN::Data</span><br class="">
                      <span class="">1.15    Data::Dump</span><br class="">
                      <span class="">1.82    DB_File</span><br class="">
                      <span class="">1.27    DBD::SQLite</span><br class="">
                      <span class="">1.609   DBI</span><br class="">
                      <span class="">1.16    Digest</span><br class="">
                      <span class="">1.01    Digest::HMAC</span><br class="">
                      <span class="">2.39    Digest::MD5</span><br class="">
                      <span class="">2.12    Digest::SHA1</span><br class="">
                      <span class="">1.01    Encode::Detect</span><br class="">
                      <span class="">0.17015 Error</span><br class="">
                      <span class="">0.27    ExtUtils::CBuilder</span><br class="">
                      <span class="">2.2203  ExtUtils::ParseXS</span><br class="">
                      <span class="">2.38    Getopt::Long</span><br class="">
                      <span class="">0.46    Inline</span><br class="">
                      <span class="">1.08    IO::String</span><br class="">
                      <span class="">1.09    IO::Zlib</span><br class="">
                      <span class="">2.28    IP::Country</span><br class="">
                      <span class="">0.29    Mail::ClamAV</span><br class="">
                      <span class="">3.003001        Mail::SpamAssassin</span><br class="">
                      <span class="">v2.008  Mail::SPF</span><br class="">
                      <span class="">1.999001        Mail::SPF::Query</span><br class="">
                      <span class="">0.35    Module::Build</span><br class="">
                      <span class="">0.21    Net::CIDR::Lite</span><br class="">
                      <span class="">0.65    Net::DNS</span><br class="">
                      <span class="">v0.003
                         Net::DNS::Resolver::Programmable</span><br class="">
                      <span class="">0.65    Net::LDAP</span><br class="">
                      <span class="">4.027  NetAddr::IP</span><br class="">
                      <span class="">1.965001        Parse::RecDescent</span><br class="">
                      <span class="">missing SAVI</span><br class="">
                      <span class="">3.17    Test::Harness</span><br class="">
                      <span class="">1.22    Test::Manifest</span><br class="">
                      <span class="">2.0.0   Text::Balanced</span><br class="">
                      <span class="">1.40    URI</span><br class="">
                      <span class="">0.77    version</span><br class="">
                      <span class="">missing YAML</span><br class="">
                      <span class=""></span><br class="">
                      <span class=""></span><br class="">
                      <span class="">MailScanner --lint</span><br class="">
                      <span class="">Trying to setlogsock(unix)</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">Reading configuration file
                        /etc/MailScanner/MailScanner.conf</span><br class="">
                      <span class="">Reading configuration file
                        /etc/MailScanner/conf.d/README</span><br class="">
                      <span class="">Read 462 hostnames from the
                        phishing whitelist</span><br class="">
                      <span class="">Read 12121 hostnames from the
                        phishing blacklists</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">Checking version numbers...</span><br class="">
                      <span class="">Version number in MailScanner.conf
                        (4.85.2) is correct.</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">Your envelope_sender_header in
                        spam.assassin.prefs.conf is correct.</span><br class="">
                      <span class="">MailScanner setting GID to  (89)</span><br class="">
                      <span class="">MailScanner setting UID to  (89)</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">Checking for SpamAssassin errors
                        (if you use it)...</span><br class="">
                      <span class="">Using SpamAssassin results cache</span><br class="">
                      <span class="">Connected to SpamAssassin cache
                        database</span><br class="">
                      <span class="">SpamAssassin reported no errors.</span><br class="">
                      <span class="">Connected to Processing Attempts
                        Database</span><br class="">
                      <span class="">Created Processing Attempts
                        Database successfully</span><br class="">
                      <span class="">There are 0 messages in the
                        Processing Attempts Database</span><br class="">
                      <span class="">Using locktype = posix</span><br class="">
                      <span class="">MailScanner.conf says "Virus
                        Scanners = clamd"</span><br class="">
                      <span class="">Found these virus scanners
                        installed: clamavmodule, clamd</span><br class="">
                      <span class="">===========================================================================</span><br class="">
                      <span class="">Filename Checks: Windows/DOS
                        Executable (1 <a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a>)</span><br class="">
                      <span class="">Other Checks: Found 1 problems</span><br class="">
                      <span class="">Virus and Content Scanning:
                        Starting</span><br class="">
                      <span class="">Clamd::INFECTED::
                        Eicar-Test-Signature :: ./1/<a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a></span><br class="">
                      <span class="">Virus Scanning: Clamd found 2
                        infections</span><br class="">
                      <span class="">Infected message 1 came from
                        10.1.1.1</span><br class="">
                      <span class="">Virus Scanning: Found 2 viruses</span><br class="">
                      <span class="">===========================================================================</span><br class="">
                      <span class="">Virus Scanner test reports:</span><br class="">
                      <span class="">Clamd said "<a moz-do-not-send="true" href="http://eicar.com/" class="">eicar.com</a>
                        was infected: Eicar-Test-Signature"</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">If any of your virus scanners
                        (clamavmodule,clamd)</span><br class="">
                      <span class="">are not listed there, you should
                        check that they are installed correctly</span><br class="">
                      <span class="">and that MailScanner is finding
                        them correctly via its virus.scanners.conf.</span><br class="">
                      <span class=""></span><br class="">
                      <span class="">Thanks for any help,</span><br class="">
                      <span class="">Howard</span><br class="">
                      <span class=""></span><br class="">
                      <span class=""></span><br class="">
                      <span class=""></span><br class="">
                      <span class=""></span><br class="">
                      <span class="">-- </span><br class="">
                      <span class="">MailScanner mailing list</span><br class="">
                      <span class=""><a moz-do-not-send="true" href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a></span><br class="">
                      <span class=""><a moz-do-not-send="true" href="http://lists.mailscanner.info/listinfo/mailscanner" class="">http://lists.mailscanner.info/listinfo/mailscanner</a></span><br class="">
                      <span class=""></span><br class="">
                    </div>
                  </blockquote>
                  <br class="">
                  <fieldset class="mimeAttachmentHeader"></fieldset>
                  <br class="">
                </blockquote>
                <br class="">
              </div>
              <br class="">
              <br class="">
              -- <br class="">
              MailScanner mailing list<br class="">
              <a moz-do-not-send="true" href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><br class="">
              <a class="moz-txt-link-freetext" href="http://lists.mailscanner.info/listinfo/mailscanner">http://lists.mailscanner.info/listinfo/mailscanner</a><br class="">
              <br class="">
            </div>
          </blockquote>
        </div>
        <br class="">
      </div>
      <br class="">
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br class="">
      <pre wrap="" class="">
</pre>
    </blockquote>
    <br class="">
  </div>

<br class=""><br class="">-- <br class="">MailScanner mailing list<br class=""><a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><br class="">http://lists.mailscanner.info/listinfo/mailscanner<br class=""><br class=""></div></blockquote></div><br class=""></div></body></html>