Thank You for Your time and answer, Magnus: > That's impossible to say based on these log entries. smtpd(8) and > cleanup(8) do not by default not log accepted recipients. > > Please do not trim logs unless asked to do so.
I think I have discerned them - simply by their from=<> and unknown to me ip/address. Do You know a way how I can track an local application/process that called postfix to send a messages (on a hacked system)?
