I was looking at my mail queue and noticed some peculiar entries in my deferred queue.
The recipient is from some weird domain that I do not host and the sender is firstname.lastname@example.org. The Origin IP is 127.0.0.1 and origin host localhost.localdomain.
It appears that MY server is trying to send email as service.paypal.com. If this is correct how can I determine who / how this is being sent and put a stop to it?
I looked at my mail stats summary emails and it sys that paypal.com is the top sender.
Thanks for your help.