Right Caleb, The "Received: from Sharen (roc-66-66-101-140.rochester.rr.com [66.66.101.140]) by mailout5.nyroc.rr.com (8.11.6/RoadRunner 1.20) with SMTP id g6BLMYL177988" bit of the header doesn't mean the person's email address but their actual IP etc. It's not the from field, this is part of the mail header that usually only shows up if you ask for it because usally only mail servers have to worry about it. Though I know that QMail is a Linux/Unix app. And that's what this particular mail server was using. So, unless I'm behind on QMail it's not running on a Windows server and the serverhole on NT. Tom