The original sub mail seemed real, and I can't find anything in the headers to indicate it was forged. So either we have a really good writer in the initial request, or it's been hijacked. Sad in either case. Dennis