admin mail bouncing

[Krishopper]

The virus notifications that go to my admin user are being bounced:

<admin@servername.domain.com>: unknown user: "admin"

The entire zimbra.log snip is below. admin@servername.domain.com is an alias on my admin@domain.com account. If I manually send email to admin@servername.domain.com, it gets delivered to my admin@domain.com account normally.

Does anyone have any ideas what may be up?

Mar 24 05:17:57 infinity postfix/smtpd[10703]: connect from mail4.mc.mpls.visi.com[208.42.156.109]
Mar 24 05:17:57 infinity postfix/smtpd[10703]: 6A4956F94D8: client=mail4.mc.mpls.visi.com[208.42.156.109]
Mar 24 05:17:57 infinity postfix/cleanup[17145]: 6A4956F94D8: message-id=<JSCKWBBJZPAUOYDSEHCMV@verizon.net>
Mar 24 05:17:57 infinity postfix/qmgr[1592]: 6A4956F94D8: from=<service@paypal.com>, size=3947, nrcpt=2 (queue active)
Mar 24 05:17:57 infinity postfix/smtpd[10703]: disconnect from mail4.mc.mpls.visi.com[208.42.156.109]
Mar 24 05:17:57 infinity amavis[25017]: (25017-09) ESMTP::10024 /opt/zimbra/amavisd/tmp/amavis-20070324T034052-25017: <service@paypal.com> -> <kristofer@domain.com>,<kristofer@email-backup.domain.com> SIZE=3947 Received: from servername.domain.com ([127.0.0.1]) by localhost (servername.domain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Sat, 24 Mar 2007 05:17:57 -0500 (CDT)
Mar 24 05:17:57 infinity amavis[25017]: (25017-09) Checking: dEJfmx6vlk3I [208.42.156.109] <service@paypal.com> -> <kristofer@domain.com>,<kristofer@email-backup.domain.com>
Mar 24 05:17:57 infinity clamd[1611]: /opt/zimbra/amavisd/tmp/amavis-20070324T034052-25017/parts/p001: HTML.Phishing.Bank-485 FOUND\n
Mar 24 05:17:57 infinity amavis[25017]: (25017-09) local delivery: <> -> <virus-quarantine>, mbx=/opt/zimbra/amavisd/quarantine/virus-dEJfmx6vlk3I
Mar 24 05:17:58 infinity postfix/smtpd[17149]: connect from localhost[127.0.0.1]
Mar 24 05:17:58 infinity postfix/trivial-rewrite[28836]: warning: do not list domain servername.domain.com in BOTH mydestination and virtual_mailbox_domains
Mar 24 05:17:58 infinity postfix/smtpd[17149]: 07B106F94E1: client=localhost[127.0.0.1]
Mar 24 05:17:58 infinity postfix/cleanup[17145]: 07B106F94E1: message-id=<VAdEJfmx6vlk3I@servername.domain.com>
Mar 24 05:17:58 infinity postfix/qmgr[1592]: 07B106F94E1: from=<admin@servername.domain.com>, size=3491, nrcpt=1 (queue active)
Mar 24 05:17:58 infinity postfix/smtpd[17149]: disconnect from localhost[127.0.0.1]
Mar 24 05:17:58 infinity amavis[25017]: (25017-09) SEND via SMTP: <admin@servername.domain.com> -> <admin@servername.domain.com>, 250 2.6.0 Ok, id=25017-09, from MTA([127.0.0.1]:10025): 250 Ok: queued as 07B106F94E1
Mar 24 05:17:58 infinity postfix/trivial-rewrite[28836]: warning: do not list domain servername.domain.com in BOTH mydestination and virtual_mailbox_domains
Mar 24 05:17:58 infinity amavis[25017]: (25017-09) Blocked INFECTED (HTML.Phishing.Bank-485), [208.42.156.109] [215.180.208.232] <service@paypal.com> -> <kristofer@domain.com>,<kristofer@email-backup.domain.com>, quarantine: virus-dEJfmx6vlk3I, Message-ID: <JSCKWBBJZPAUOYDSEHCMV@verizon.net>, mail_id: dEJfmx6vlk3I, Hits: -, 585 ms
Mar 24 05:17:58 infinity postfix/smtp[17146]: 6A4956F94D8: to=<kristofer@domain.com>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (254 2.7.0 Ok, discarded, id=25017-09 - VIRUS: HTML.Phishing.Bank-485)
Mar 24 05:17:58 infinity postfix/smtp[17146]: 6A4956F94D8: to=<kristofer@email-backup.domain.com>, orig_to=<kristofer@domain.com>, relay=127.0.0.1[127.0.0.1], delay=1, status=sent (254 2.7.0 Ok, discarded, id=25017-09 - VIRUS: HTML.Phishing.Bank-485)
Mar 24 05:17:58 infinity postfix/qmgr[1592]: 6A4956F94D8: removed
Mar 24 05:17:58 infinity postfix/local[17460]: 07B106F94E1: to=<admin@servername.domain.com>, relay=local, delay=0, status=bounced (unknown user: "admin")
Mar 24 05:17:58 infinity postfix/cleanup[17145]: 492B26F94E3: message-id=<20070324101758.492B26F94E3@servername.domain.c om>
Mar 24 05:17:58 infinity postfix/qmgr[1592]: 492B26F94E3: from=<>, size=5240, nrcpt=3 (queue active)
Mar 24 05:17:58 infinity postfix/qmgr[1592]: 07B106F94E1: removed
Mar 24 05:17:58 infinity postfix/lmtp[17150]: 492B26F94E3: to=<admin@domain.com>, orig_to=<admin@servername.domain.com>, relay=servername.domain.com[10.10.2.1], delay=0, status=sent (250 2.1.5 OK)
Mar 24 05:17:58 infinity postfix/lmtp[17150]: 492B26F94E3: to=<kristofer@domain.com>, orig_to=<admin@servername.domain.com>, relay=servername.domain.com[10.10.2.1], delay=0, status=sent (250 2.1.5 OK)
Mar 24 05:17:58 infinity postfix/lmtp[17150]: 492B26F94E3: to=<kristofer@email-backup.domain.com>, orig_to=<admin@servername.domain.com>, relay=servername.domain.com[10.10.2.1], delay=0, status=sent (250 2.1.5 OK)
Mar 24 05:17:58 infinity postfix/qmgr[1592]: 492B26F94E3: removed

[phoenix]

Originally Posted by Krishopper

<admin@servername.domain.com>: unknown user: "admin"

That would seem to be the error. You either need to change the account that mail is delivered to or create a domain 'servername.domain.com' and add the alias 'admin@servername.domain.com' to an account you want to receive the mail. Either will work, search the forums for some pointers as this has come up before.

[Krishopper]

I do have a domain created in zimbra called servername.domain.com, and an alias for admin@servername.domain.com is setup as an alias on the admin@domain.com account. Like I said, if I send an actual email message to admin@servername.domain.com, it delivers fine and I can read it in my admin@domain.com mailbox.. however, these virus quarantine notification messages are bouncing with "user unknown".

[jholder]

Is it checked for "Can Accept Mail"?

[Krishopper]

Yes, it is.

zmprov ga admin@domain.com:

# name admin@domain.com
cn: admin
mail: admin@domain.com
mail: admin@server.domain.com
objectClass: organizationalPerson
objectClass: zimbraAccount
objectClass: amavisAccount
sn: admin
uid: admin
userPassword: VALUE-BLOCKED
zimbraAccountStatus: active
zimbraAdminAuthTokenLifetime: 12h
zimbraAttachmentsBlocked: FALSE
zimbraAttachmentsIndexingEnabled: TRUE
zimbraAttachmentsViewInHtmlOnly: FALSE
zimbraAuthTokenLifetime: 2d
zimbraAvailableSkin: bare
zimbraAvailableSkin: froggy
zimbraAvailableSkin: harvest
zimbraAvailableSkin: lavender
zimbraAvailableSkin: rose
zimbraAvailableSkin: sand
zimbraAvailableSkin: sky
zimbraAvailableSkin: steel
zimbraAvailableSkin: vanilla
zimbraCOSId: e00428a1-0c00-11d9-836a-000d93afea2a
zimbraContactMaxNumEntries: 0
zimbraFeatureAdvancedSearchEnabled: TRUE
zimbraFeatureCalendarEnabled: TRUE
zimbraFeatureChangePasswordEnabled: TRUE
zimbraFeatureContactsEnabled: TRUE
zimbraFeatureConversationsEnabled: TRUE
zimbraFeatureFiltersEnabled: TRUE
zimbraFeatureGalAutoCompleteEnabled: TRUE
zimbraFeatureGalEnabled: TRUE
zimbraFeatureHtmlComposeEnabled: TRUE
zimbraFeatureIMEnabled: FALSE
zimbraFeatureIdentitiesEnabled: TRUE
zimbraFeatureInitialSearchPreferenceEnabled: TRUE
zimbraFeatureMailForwardingEnabled: TRUE
zimbraFeatureMobileSyncEnabled: TRUE
zimbraFeatureNewMailNotificationEnabled: TRUE
zimbraFeatureNotebookEnabled: TRUE
zimbraFeatureOutOfOfficeReplyEnabled: TRUE
zimbraFeaturePop3DataSourceEnabled: TRUE
zimbraFeatureSavedSearchesEnabled: TRUE
zimbraFeatureSharingEnabled: TRUE
zimbraFeatureSkinChangeEnabled: TRUE
zimbraFeatureTaggingEnabled: TRUE
zimbraFeatureViewInHtmlEnabled: FALSE
zimbraId: 24ee2ba5-ce93-4d79-9238-eca11308b666
zimbraImapEnabled: TRUE
zimbraIsAdminAccount: TRUE
zimbraLastLogonTimestamp: 20070323204217Z
zimbraMailAlias: admin@server.domain.com
zimbraMailDeliveryAddress: admin@domain.com
zimbraMailHost: server.domain.com
zimbraMailIdleSessionTimeout: 0
zimbraMailMessageLifetime: 0
zimbraMailMinPollingInterval: 2m
zimbraMailQuota: 0
zimbraMailSpamLifetime: 14d
zimbraMailStatus: enabled
zimbraMailTransport: lmtp:server.domain.com:7025
zimbraMailTrashLifetime: 14d
zimbraNewMailNotificationBody: New message received at ${RECIPIENT_ADDRESS}.${NEWLINE}Sender: ${SENDER_ADDRESS}${NEWLINE}Subject: ${SUBJECT}
zimbraNewMailNotificationFrom: Postmaster <postmaster@${RECIPIENT_DOMAIN}>
zimbraNewMailNotificationSubject: New message received at ${RECIPIENT_ADDRESS}
zimbraPasswordEnforceHistory: 0
zimbraPasswordLocked: FALSE
zimbraPasswordLockoutDuration: 1h
zimbraPasswordLockoutEnabled: FALSE
zimbraPasswordLockoutFailureLifetime: 1h
zimbraPasswordLockoutMaxFailures: 10
zimbraPasswordMaxAge: 0
zimbraPasswordMaxLength: 64
zimbraPasswordMinAge: 0
zimbraPasswordMinLength: 6
zimbraPasswordModifiedTime: 20061229004601Z
zimbraPop3Enabled: TRUE
zimbraPrefAutoAddAddressEnabled: TRUE
zimbraPrefCalendarAlwaysShowMiniCal: TRUE
zimbraPrefCalendarApptReminderWarningTime: 5
zimbraPrefCalendarFirstDayOfWeek: 0
zimbraPrefCalendarInitialView: workWeek
zimbraPrefCalendarNotifyDelegatedChanges: FALSE
zimbraPrefCalendarUseQuickAdd: TRUE
zimbraPrefComposeFormat: html
zimbraPrefComposeInNewWindow: FALSE
zimbraPrefContactsInitialView: list
zimbraPrefContactsPerPage: 25
zimbraPrefDedupeMessagesSentToSelf: dedupeNone
zimbraPrefForwardIncludeOriginalText: includeBody
zimbraPrefForwardReplyInOriginalFormat: TRUE
zimbraPrefForwardReplyPrefixChar: >
zimbraPrefGalAutoCompleteEnabled: FALSE
zimbraPrefGroupMailBy: conversation
zimbraPrefHtmlEditorDefaultFontColor: #000000
zimbraPrefHtmlEditorDefaultFontFamily: Times New Roman
zimbraPrefHtmlEditorDefaultFontSize: 12pt
zimbraPrefImapSearchFoldersEnabled: TRUE
zimbraPrefIncludeSpamInSearch: FALSE
zimbraPrefIncludeTrashInSearch: FALSE
zimbraPrefMailInitialSearch: in:inbox
zimbraPrefMailItemsPerPage: 25
zimbraPrefMailPollingInterval: 5m
zimbraPrefMailSignatureStyle: outlook
zimbraPrefMessageViewHtmlPreferred: TRUE
zimbraPrefReadingPaneEnabled: TRUE
zimbraPrefReplyIncludeOriginalText: includeBody
zimbraPrefSaveToSent: TRUE
zimbraPrefSentMailFolder: sent
zimbraPrefShowFragments: TRUE
zimbraPrefShowSearchString: FALSE
zimbraPrefSkin: sand
zimbraPrefTimeZoneId: (GMT-08.00) Pacific Time (US & Canada) / Tijuana
zimbraPrefUseKeyboardShortcuts: TRUE
zimbraPrefUseRfc2231: FALSE
zimbraPrefUseTimeZoneListInCalendar: FALSE
zimbraZimletAvailableZimlets: com_zimbra_date
zimbraZimletAvailableZimlets: com_zimbra_email
zimbraZimletAvailableZimlets: com_zimbra_phone
zimbraZimletAvailableZimlets: com_zimbra_url
zimbraZimletAvailableZimlets: com_zimbra_search
zimbraZimletAvailableZimlets: com_zimbra_arcade
zimbraZimletAvailableZimlets: com_zimbra_collector
zimbraZimletAvailableZimlets: com_zimbra_tracking
zimbraZimletAvailableZimlets: com_zimbra_wikipedia
zimbraZimletAvailableZimlets: com_zimbra_ymaps
zimbraZimletAvailableZimlets: com_zimbra_gtranslator

[Krishopper]

FWIW:

Zimbra 4.5.3
Mac OS X Server 10.4.9 (ppc)

[jholder]

The account you should be looking at is admin@hostname.domain.com

[Krishopper]

Originally Posted by Krishopper

Mar 24 05:17:58 infinity postfix/trivial-rewrite[28836]: warning: do not list domain servername.domain.com in BOTH mydestination and virtual_mailbox_domains
[/FONT]

Is it possible Postfix is having a problem with this, and looking up "admin" in local tables rather than ldap tables?

I still find it odd that emails to admin@servername.domain.com work fine.

[Krishopper]

Originally Posted by jholder

The account you should be looking at is admin@hostname.domain.com

The admin account that I have been using since installation was admin@domain.com. Should I delete that account, and create admin@hostname.domain.com? admin@hostname.domain.com has been an alias on my admin@domain.com account.

[Krishopper]

This was resolved by removing the admin@servername.domain.com alias and creating it as a straight up account.

I still find it odd that some mail bounced, and some didnt, but whatever - it works now