ok people, don't even try to guess where the message came from. The reason I say this is because people are using a technique called ip spoofing. it's accomplished by somebody using the standard proxy ports either 1080 23 or 80 or 8080 people make a nucence of themselves by doing this and because of this technique it's harder to track where things such as DoS "denyal of service" attacks and spam originate from. and as some of you well know, it doesn't take much to change email header information. so, let's not second guess here. Shaun.