On Thu, 5 Mar 2015, Rich Shepard wrote:
Did we ever confirm where the "stuck" email message comes from?
There's nothing about this message in maillog or maillog.1, only in maillog.2 from Tuesday.
Using a different string for grep finds this in today's /var/log/maillog: Mar 5 08:33:50 salmo postfix/pickup[8043]: 948EC9926E: uid=0 from=<root> Mar 5 08:33:50 salmo postfix/cleanup[8825]: 948EC9926E: message-id=<201503 05163350.948ec99...@salmo.appl-ecosys.com> Mar 5 08:33:50 salmo postfix/cleanup[8825]: 948EC9926E: reject: body Mar 4 04:40:03 salmo postfix/cleanup[25492]: 40A9099270: reject: body Mar 3 04:40:03 salmo postfix/cleanup[11578]: 595889929F: reject: body Mar 2 11:14:37 salmo postfix/cleanup[4816]: B52909929A from local; from=<r...@appl-ecosys.com>: 5.7.1 Rule B118 Mar 5 08:33:50 salmo postfix/cleanup[8825]: 948EC9926E: to=<rshep...@appl-ecosys.com>, relay=none, delay=1.2, delays=1.2/0/0/0, dsn=5.7.1, status=bounced (Rule B118) Mar 5 08:33:50 salmo postfix/cleanup[8828]: A6C4E99275: message-id=<20150305163350.a6c4e99...@salmo.appl-ecosys.com> Mar 5 08:33:50 salmo postfix/bounce[8827]: 948EC9926E: sender non-delivery notification: A6C4E99275 Mar 5 08:33:50 salmo postfix/qmgr[15461]: A6C4E99275: from=<>, size=2191, nrcpt=1 (queue active) Mar 5 08:33:50 salmo postfix/local[8829]: A6C4E99275: to=<r...@appl-ecosys.com>, relay=local, delay=0.08, delays=0.04/0/0/0.04, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail) Mar 5 08:33:50 salmo postfix/qmgr[15461]: A6C4E99275: removed The third line shows it rejecting that same message (probably in the logwatch report) March 2nd, 3rd, and 4th, in addition to today. Rich