Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

At the mail.log this appears ~2 times per minute. I didn't care what they were, but now I want to find the reason.

Oct  2 20:27:02 sa-pd postfix/cleanup[31255]: 13A342CE301C: message-id=<20121002182702.13A342CE301C@sa-pd.eu>
Oct  2 20:27:02 sa-pd postfix/bounce[30816]: E41782CE301B: sender non-delivery notification: 13A342CE301C
Oct  2 20:27:02 sa-pd postfix/qmgr[6230]: 13A342CE301C: from=<>, size=2454, nrcpt=1 (queue active)
Oct  2 20:27:02 sa-pd postfix/qmgr[6230]: E41782CE301B: removed
Oct  2 20:27:02 sa-pd postfix/virtual[27222]: 13A342CE301C: to=<www-data@sapd@CENSORED(itsmymaindomain)>, relay=virtual, delay=0.18, delays=0.09/0/0/0.09, dsn=5.1.1, status=bounced (unknown user: "www-data@sapd@CENSORED(itsmymaindomain)")
Oct  2 20:27:02 sa-pd postfix/qmgr[6230]: 13A342CE301C: removed
Oct  2 20:28:02 sa-pd postfix/pickup[24018]: 18D432CE301B: uid=33 from=<www-data>
Oct  2 20:28:02 sa-pd postfix/cleanup[31255]: 18D432CE301B: message-id=<20121002182802.18D432CE301B@CENSORED(itsmymaindomain)>
Oct  2 20:28:02 sa-pd postfix/qmgr[6230]: 18D432CE301B: from=<www-data@sapd@CENSORED(itsmymaindomain)>, size=657, nrcpt=1 (queue active)
Oct  2 20:28:02 sa-pd postfix/virtual[30817]: 18D432CE301B: to=<www-data@sapd@CENSORED(itsmymaindomain)>, orig_to=<www-data>, relay=virtual, delay=0.33, delays=0.26/0/0/0.07, dsn=5.1.1, status=bounced (unknown user: "www-data@sapd@CENSORED(itsmymaindomain)")

Does someone have an idea?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

There's some program running as the www-data user that's sending an email every minute. If it's indeed trying to send email to www-data@sapd@somewhere.example.com, the email address is ill-formed, presumably mistyped in some configuration file. Look for that address somewhere in your configuration files (try grep -r www-data@sapd@ /etc ~www-data/).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.