Incoming password protected archives are automatically blocked which isn't a problem but we never receive the released message after *successfully* releasing them in mailwatch. The message doesn't show up in exchange server logs either. I also noticed that the "from" field gets changed to my email address instead of being kept as the original sender.
Where should I look next?Feb 7 11:23:32 efaserv MailScanner[33516]: New Batch: Scanning 1 messages, 4646 bytes
Feb 7 11:23:32 efaserv MailScanner[33516]: Password-protected archive (dsaadsa.zip) in E17A410066B.A958B
Feb 7 11:23:32 efaserv MailScanner[33516]: Virus and Content Scanning: Starting
Feb 7 11:23:32 efaserv MailScanner[33516]: Viruses marked as silent: MailScanner: Message contained password-protected archive
Feb 7 11:23:32 efaserv MailScanner[33516]: Saved entire message to /var/spool/MailScanner/quarantine/20190207/E17A410066B.A958B
Feb 7 11:23:32 efaserv MailScanner[33516]: Saved infected "dsaadsa.zip" to /var/spool/MailScanner/quarantine/20190207/E17A410066B.A958B
Feb 7 11:23:32 efaserv MailScanner[33516]: Spam Checks: Starting
Feb 7 11:23:32 efaserv MailScanner[33516]: Message E17A410066B.A958B from 127.0.0.1 (myemail@ourdomain.ca) is whitelisted
Feb 7 11:23:32 efaserv postfix/pickup[11529]: 62EF910066E: uid=89 from=<myemail@ourdomain.ca>
Feb 7 11:23:32 efaserv postfix/cleanup[33765]: 62EF910066E: hold: header Received: by efaserv.local.domain (Postfix, from userid 89)??id 62EF910066E; Thu, 7 Feb 2019 11:23:32 -0500 (EST) from local; from=<myemail@ourdomain.ca>
Feb 7 11:23:32 efaserv postfix/cleanup[33765]: 62EF910066E: message-id=<20190207162332.62EF910066E@efaserv.local.domain>
Feb 7 11:23:32 efaserv MailScanner[33516]: Notices: Warned about 1 messages
Feb 7 11:23:32 efaserv MailScanner[33516]: Deleted 1 messages from processing-database