On 16/11/2008, at 5:30 PM, Matthew Moyle-Croft wrote: > Is the spam SMTP meant to be originating from the McColo ranges or > is it being used to control other machines elsewhere? The latter. -- Nathan Ward