procmail delivering all mail to a default account?

My primary domain has some mail accounts such as :

And these send/receive mail fine.

Now a spammer comes and sends mail to :

Right now all those messages are being sent to an account on the system, that is NOT a part of

I think there is some old configuration from previous operating systems lingering around that cause this.
I see the message being delivered by procmail :

Apr 4 13:00:19 w00t postfix/local[26195]: 6FF1D1403BE:,, relay=local, delay=10, delays=0.76/8.7/0/0.74, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME)

So finally the question :
Where is the command that is telling all unmatched mail to to go to someotheruser ?
I’ve dug through postfix and mail aliases and not found it. any clues?


Found it :

/etc/postfix/virtual :

/etc/aliases : \someotheruser

Changed aliases and reran postalias and all is good again