Hi.. the mailserver for jthai.net, which is mail.jthai.net seems to be open relay for me. so probably the guys from jthai.net are not responsible for sending the virus mails. -- snip -- # telnet 203.170.171.248 25 MAIL FROM:<[EMAIL PROTECTED]> 250 ok RCPT TO:<[EMAIL PROTECTED]> 250 ok -- snip end -- Best Regards, Justin