Warren H. Prince: > > On Sep 1, 2013, at 8:06 PM, Noel Jones <njo...@megan.vbhcs.org> wrote: > > > >> Sep 1 23:44:08 production postfix/smtpd[10454]: connect from > >> localhost[127.0.0.1] > > > > SOME OTHER PROGRAM is now injecting mail into postfix. Don't blame > > postfix. > > > > I'm not "blaming" postfix, but postfix is my only source of > information. Like I said, I thought it might have been dovecot, > but I eliminated that by stopping the service. Any ideas on how > to identify the app/service/process/villain ?
This is no longer a Postfix question. To find out what sends mail from 127.0.0.1, block 127.0.0.1 port 25 and see what process throws an error that it can no longer send mail. Wietse