I just got an email from james@xyz.com where xyz.com is the main domain on my Raq 4. James is not a valid account on my server and I am not sure where this email came from. I am concerned that somebody is bouncing spam of my mail server. Is there any log file that I can look at to determine where the message came from or how many messages were sent by "james@xyz.com"?

Yeah, something like that has happened to me. I got spammed my MyOwnScreenNameAtAOL.com.

When you programatically send email from script (PHP, ASP, etc) you can really put anything you want to in the "From". You have to look at your header information to devulge the details.

Outlook: View>options.... or something like that.