On Tue, May 17, 2011 at 6:25 PM, Noel Jones <njo...@megan.vbhcs.org> wrote: > > The usual suspects are: > > - these are not really generated from your machine, but rather bounces of > undeliverable mail you've previously accepted. Don't accept mail you can't > or won't deliver. > > - an insecure web script is being exploited. > > See more on both these subjects in the list archive. > > If you're only seeing a handful per day, my guess is these are bounces. > Usually exploits result in tens of thousands or more spams sent. > > You can show postfix log entries here if you need more information on what > they mean. > > > > -- Noel Jones >
OK, I found it. I was misreading logs. I found a compromized account that was being used to send spams. Thanks for your help!