Is there any tool that will analyze bad messages in the gwia gwprob directory? Something that would at least say - this line is the problem? My problem will likely go away once we retire our M+Netmail server where most of the bad messages are simply return receipts from M+Netmail server. However, I see this bounce message for a legitimate email to a local school and I'm wondering why it is bad. Obviously, I've changed IPs and domains, etc.

This is that particular bad message......

<IaHead>
<IaMsgTag>000d6185</IaMsgTag>
<IaMsgSender>
</IaMsgSender>
<IaReceivedTime>4f8dbb9b</IaReceivedTime>
</IaHead>
MAIL FROM:<> SIZE=51772 RET=HDRS
RCPT TO:<user@ourdomain.com> NOTIFY=FAILURE
Received: from ourdomain.com ([1.1.1.1])
by groupwise.jefferson.ourdomain.com with ESMTP (TLS encrypted); Tue, 17 Apr 2012 14:51:07 -0400
Received: from gateway1.regionaldomain.org ([2.2.2.2]) by ourdomain.com ([1.1.1.1]) with ESMTP via TCP; Tue, 17 Apr 2012 14:51:07 -0400
X-MailFrom:
Received: by gateway1.regionaldomain.org (Spam & Virus Firewall)
id 1DBD21BEEE9E; Tue, 17 Apr 2012 14:51:07 -0400 (EDT)
Date: Tue, 17 Apr 2012 14:51:07 -0400 (EDT)
From: MAILER-DAEMON (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: user@ourdomain.com
MIME-Version: 1.0
Message-Id: <20120417185107.1DBD21BEEE9E@gateway1.regionaldoma in.org>
Content-Type: multipart/report; report-type=delivery-status;
boundary="03A161BEEE8C.1334688667/gateway1.regionaldomain.org"

This is a MIME-encapsulated message.

--03A161BEEE8C.1334688667/gateway1.regionaldomain.org
Content-Description: Notification
Content-Type: text/plain

This is the Spam & Virus Firewall at gateway1.regionaldomain.org.

I'm sorry to inform you that the message below could not be delivered.
When delivery was attempted, the following error was returned.


<eldr@adomain.org>: host 3.3.3.3[3.3.3.3]
said: 550 No such recipient (in reply to RCPT TO command)

--03A161BEEE8C.1334688667/gateway1.regionaldomain.org
Content-Description: Delivery error report
Content-Type: message/delivery-status

Reporting-MTA: dns; gateway1.regionaldomain.org
Arrival-Date: Tue, 17 Apr 2012 14:51:07 -0400 (EDT)

Final-Recipient: rfc822; eldr@adomain.org
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Spam-&-Virus-Firewall; host 3.3.3.3[3.3.3.3]
said: 550 No such recipient (in reply to RCPT TO command)

--03A161BEEE8C.1334688667/gateway1.regionaldomain.org
Content-Description: Undelivered Message
Content-Type: message/rfc822