Grep or dumb idiot question

Help! (Home for newbies)
1
SYSTEM INFORMATION
OS type and version Ubuntu Linux 24.04.3
Webmin version 2.610
Usermin version 2.510
Virtualmin version 7.50.2 GPL
Theme version 26.20
Nginx version 1.24.0
Package updates All installed packages are up to date

I am receiving “Undelivered Mail Returned to Sender”
emails sent by a VS managed by myself bounced due to the email address “user@domain.tld” Recipient address rejected: Address does not exist (in
reply to RCPT TO command)

I have tried to grep the address but cannot find it anywhere :confounded_face:

where is it coming from? how?
the content of the message was important and has been fixed (

The following web apps managed by Virtualmin have new versions available :

Domain name                    Web app name              Old version New version
------------------------------ ------------------------- ----------- -----------
xxxxxx.com                  Joomla                    5.4.0       5.4.1      

Upgrades can be done in Virtualmin, on each domain's Manage Web App page or all at once at :
https://xxxxxxx.tld:10000/virtual-server/edit_newscripts.cgi?mode=upgrade

) even though the …/edit_newscripts.cgi?mode=upgrade did not work

2

or dumb idiot question

Somehow this one talks to me. :wink:

Where/what did you grep? Did you use the GUI search logs? I have two. One for the old style logs and one for journalctl.

3

the command was
grep -irl 'user@domain.tld'
using the real email of course

the logs gave me nothing couldn’t even find why the cgi command failed - but that was fixed using the really obvious route - Virtualmin -> Manage Web Apps so not important.

i did wonder if grep failed for some other reason - but expected a message.

4

Unless you added RSlog, or upgraded a server that already had it, the messages will be in the that obscure, to me, system of journalctl.

image
image1424×891 272 KB

5

although i looked using terminal i didn’t with Webmin -> System -> System Logs :double_exclamation_mark:
must be getting senile in my old age :old_man:

postfix
postfix1274×510 65.6 KB

  • now just need to find out where these are being sent
  • (the why is just fine)
6

If you filter those ID’s should give you a senders address.

image
image368×313 20 KB

image
image1572×238 56.4 KB

1 Like
7

POSTFIX2
POSTFIX2985×355 60.3 KB

thanks that helped a little :wink:
more places in Postfix to look not somewhere i wander
the “sender” is the “root” address - which is pretty obvious (internal)* as I am being copied with the message

  • somewhere on the VM there must be an alias or map that is sending the messages :exclamation_question_mark:
    as it is not confined to one VS
    I have had 3 now (all 3 requiring Virtualmin -> Manage Web Apps intervention)
8

Grep, by itself, was never going to work with jounalctl. Look at the top. It gives you the new command you need to run in the terminal.
image

1 Like
9

but was not originally searching there i was searching globally expecting to find what was sending the mail (thinking it must be one particular VS - even though it turned out to be 3) the email is a very old entry somewhere on the VM that has survived other VS additions - I still think it is somewhere in Postfix (alias or map) but remains to just bite again

10

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.