On Sep 1, 2013, at 8:06 PM, Noel Jones <njo...@megan.vbhcs.org> wrote: > >> Sep 1 23:44:08 production postfix/smtpd[10454]: connect from >> localhost[127.0.0.1] > > SOME OTHER PROGRAM is now injecting mail into postfix. Don't blame > postfix. >
I'm not "blaming" postfix, but postfix is my only source of information. Like I said, I thought it might have been dovecot, but I eliminated that by stopping the service. Any ideas on how to identify the app/service/process/villain ?