Apparently, 1) You have virtual alias mapping enabled BEFORE the content filter, as shown by these logfile records:
Oct 23 14:50:10 skuns spampd[60584]: processing message <20091023105009.a3ad656...@hive.ulgsm.ru> for <al...@domino.local> ORCPT=rfc822;ale...@ulgsm.ru Oct 23 14:50:12 skuns postfix/smtp[64007]: C2BAFB849: to=<al...@domino.local>, orig_to=<ale...@ulgsm.ru>, relay=127.0.0.1[127.0.0.1]:10027, delay=3.2, delays=0. 2) You have no virtual alias mapping for local submissions (and you have no content filtering for local submission). It's your choice not to filter local submissions, but you must apply the same virtual alias mapping for all mail, whether it comes from local submission or otherwise. Wietse