The mail is sent from the server and from the mail logs I am not able to ascertain the source from where it is generated. The logs in syslog and mail.log looks like this: Code: Nov 12 20:03:03 server2 postfix/qmgr[8871]: C712532E0902: from=<>, size=4078, nrcpt=1 (queue active) Nov 12 20:03:04 server2 postfix/smtp[14831]: C712532E0902: host hdfcbank-com.antispam13.softcell.in[202.154.170.226] refused to talk to me: 554 5.7.1 You are not allowed to connect. Nov 12 20:03:06 server2 postfix/smtp[14831]: C712532E0902: to=<[email protected]>, relay=hdfcbank-com.antispam13.softcell.in[202.154.160.13]:25, delay=1499, delays=1497/0.04/1.5/0, dsn=4.7.1, status=deferred (host hdfcbank-com.antispam13.softcell.in[202.154.160.13] refused to talk to me: 554 5.7.1 You are not allowed to connect.)
You can look at the contents of the message. The log says the message went to deferred queue, so it is stored there. Use the mail ID, in this case it is C712532E0902. Code: postcat /var/spool/postfix/deferred/C/C712532E0902
I guess it can be a bounce message, due to the empty from field. But you can find it out by using the command @Taleman suggested.
