Ever since this mydoom virus we are getting pounded by messages to our
domain but the user is fake. I am not finding a lot of help on interpreting
the gwia diag log. My question is in the diag log, the res_query and
res_mkquery, are these asking for the address of the originating smtp server
that originated this email for this fake user ??? If not, what do I look at
to figure out what that originating smtp servers address is ???