I can but the messages are coming from my exchange server. Because when I have all outbound stopped inside exchange the messages are in the exchange queue. ________________________________ From: exchangelist-bounce@xxxxxxxxxxxxx on behalf of Robert K Coffman Jr. -Info From Data Corp. Sent: Fri 1/29/2010 11:03 AM To: exchangelist@xxxxxxxxxxxxx Subject: [ExchangeList] Re: How to find a PC that is sending rogue emails? http://www.msexchange.org <http://www.msexchange.org/> -------------------------------------------------------I don't use ISA but can you log outbound connections on 25?? ------------------------------------------------------- List Archives: //www.freelists.org/archives/exchangelist/ MSExchange Newsletter: http://www.msexchange.org/pages/newsletter.asp MSExchange Articles and Tutorials: http://www.msexchange.org/articles_tutorials/ MSExchange Blogs: http://blogs.msexchange.org/ ------------------------------------------------------- Visit TechGenix.com for more information about our other sites: http://www.techgenix.com <http://www.techgenix.com/> ------------------------------------------------------- To unsubscribe visit http://www.msexchange.org/pages/exchangelist.asp Report abuse to listadmin@xxxxxxxxxxxxxx