Warren H. Prince:
>
> On Sep 1, 2013, at 8:06 PM, Noel Jones <[email protected]> wrote:
> >
> >> Sep 1 23:44:08 production postfix/smtpd[10454]: connect from
> >> localhost[127.0.0.1]
> >
> > SOME OTHER PROGRAM is now injecting mail into postfix. Don't blame
> > postfix.
> >
>
> I'm not "blaming" postfix, but postfix is my only source of
> information. Like I said, I thought it might have been dovecot,
> but I eliminated that by stopping the service. Any ideas on how
> to identify the app/service/process/villain ?
This is no longer a Postfix question.
To find out what sends mail from 127.0.0.1, block 127.0.0.1 port
25 and see what process throws an error that it can no longer send
mail.
Wietse