Thanks,
Josh -- This message has been scanned for viruses and dangerous content by Mychoice, and is believed to be clean.
First of all thank you so much for helping me. I found it was a hacked
user account in the e-mail system. Not only did they use his e-mail
account they used his webmail too. Once I changed his password. As of
yet they have gave up trying. I'm amazed I did not catch this sooner.
I did catch something was up in his user account. But it was not until
I installed sasl that I was able to catch the other half. It then told
me enough and I was able to track down the ip number. The over sea and
all universe ip numbers.
