Peter- Friday, February 8, 2013, 5:40:23 AM, you wrote: OK - I'll bite... what's wrong with those headers? I see sundown at pacifier.com as the authenticated sender. The message came from the smtp server at pacifier.net and originated from a machine with a dhcp address from iinet.com over a secure connection. -- -Mark Wieder mwieder at ahsoftware.net