Looking in the GeoIP data directory, I see that two of the files are symbolic links pointing to files that don't exist:
[root@efa log]# ls -1 /usr/share/GeoIP/Geo*
and that both links are pointing to /var/www/html/mailscanner/temp/GeoIP.dat, which doesn't exist./usr/share/GeoIP/GeoIPASNum.dat
/usr/share/GeoIP/GeoIPASNumv6.dat
/usr/share/GeoIP/GeoIPCity.dat
/usr/share/GeoIP/GeoIPCityv6.dat
/usr/share/GeoIP/GeoIP.dat
/usr/share/GeoIP/GeoIPv6.dat
/usr/share/GeoIP/GeoLiteASNum.dat
/usr/share/GeoIP/GeoLiteASNumv6.dat
/usr/share/GeoIP/GeoLiteCity.dat
/usr/share/GeoIP/GeoLiteCityv6.dat
/usr/share/GeoIP/GeoLiteCountry.dat
The problem was resolved when I found the "update GeoIP database' link under the Tools menu.
(https://<efabox>/mailscanner/geoip_update.php).
Who knew?