Howdy, If you are running vpopmail with an smtp-auth patch, you might want to look at this:
http://marc.theaimsgroup.com/?l=qmail&m=105452174430616&w=2 Apparently one of the smtp-auth patches takes any old login/pass and allows relaying, and it's being abused by spammers. I haven't followed the whole thread yet... Charles