My mail server is on the Blacklist and I figured it was a client that might be causing the issue. However, since the office was closed this past weekend and all PC's were turned off. I am now thinking that maybe the mail server has been comprimised. Is there a way to tell? I pulled a lot of the mail logs last week and seen nothing strange, but not sure what I am looking for other than a bogus user.