Marco Stoecker: > > You need to find the records where the same message is delivered > > more than once to the same recipient, then look for all the records > > with the same Postfix QUEUE ID. That will show if the duplication > > happened BEFORE Postfix or INSIDE Postfix.S It may not matter for > > the recipient, but it matters for the solution. > > Here is an entry beginning where an email was sent 5 times > > Oct 22 10:40:10 hostname postfix/local[4909]: BF9AD1C94: to=... > > Is BF9AD1C94 the Postfix QUEUE ID?
Yes. > If so, than each mail that was sent 5 times have 5 different QUEUE ID's. Then Postfix received 5 different messages. > Is that an indicator that the duplication happend earlier (maybe by > mailman?) in the chain? You need to search for the logfile records where these 5 messages were received. Usually that will be smtpd records for SMTP mail, or pickup records for mail received with /usr/sbin/sendmail. Wietse