> If it's backscatter, it should be coming from <>, not a "valid company > address". Please show your logs during delivery of the alleged backscatter. >
I don't have anymore the logs from Postfix and I'm not sure if it really is a backscatter problem, all I have right now is the following: ---------------------- -----Original Message----- From: Judy Aguilar [mailto:judyagui...@example.com] Sent: Tuesday, May 26, 2009 4:41 PM To: Sheila Villanueva Subject: Fw: No branding needed! Pls see "VIAGRA.Official Site's email address -- creati...@example.com Fyi. ----- Original Message ----- From: "Biba Cabuquit" <bibacabuq...@example.com> To: "VIAGRA . Official Site" <creati...@example.com> Sent: Tuesday, May 26, 2009 3:16 PM Subject: No branding needed! ------- end--------- The creati...@example.com is a valid email address and yet it has the name VIAGRA Official site, is the mail server the causing the issue or there is a worm on the users PC that' causing this. >> My /etc/postfix/header_checks contain only the following: >> >> /^Received:/ HOLD > > Very odd that you want to hold ALL email with this check. Does MailScanner > examine messages in the hold queue and then release them? > MailScanner really examines messages in the HOLD queue because all emails incoming/outgoing are tagged by MailScanner as having scanned or I'm totally wrong?
