Oh man I'm sure this is a RTFM/PEBCAK error.. When I reply to a mail-submitted ticket in RT the reply-to address is "www-data at rt.foo.com" instead of "support at rt.foo.com". And yes I know www-data is the apache user in the httpd.conf .. Still doesn't make sense why RT is using that vs. the address I specified for the queue. Anyone? :)