Just a total guess but it sounds like I would look for someone hacking your machine from outside or some kind of (also outside) accident. Check the source addresses on all SMTP connections when this is happening (netstat). -Barry Shein, Boston University