here is the header info that comes with the messages in the /var/mail/root
This one comes from the tutorial that im working now.
Return-Path: <nobody>
Received: (from nobody@localhost)
by home.joesmut.com (8.12.4/8.12.4/Submit) id h851HL3W015341;
Thu, 4 Sep 2003 20:17:21 -0500
Date: Thu, 4 Sep 2003 20:17:21 -0500
Message-Id: <200309050117.h851HL3W015341@home.joesmut.com>
To: asdf
Subject: Your Distributor Membership at mywebsite.com
From: MyWebSite<email@mywebsite.com>
X-Mailer: PHP/4.3.1
This one came from phpnuke when it failed to send:
Return-Path: <nobody@home.joesmut.com>
Received: from home.joesmut.com (IDENT:99@localhost [127.0.0.1])
by home.joesmut.com (8.12.4/8.12.4) with ESMTP id h718Uxgu020195
for <csw333@pacbell.net>; Fri, 1 Aug 2003 03:30:59 -0500
Received: (from nobody@localhost)
by home.joesmut.com (8.12.4/8.12.4/Submit) id h718UweY020194;
Fri, 1 Aug 2003 03:30:58 -0500
Date: Fri, 1 Aug 2003 03:30:58 -0500
Message-Id: <200308010830.h718UweY020194@home.joesmut.com>
To: csw333@pacbell.net
Subject: New User Account Activation
From: fr8vcd@hotmail.com
X-Mailer: PHP/4.3.1
and this one had a bounce back.
From MAILER-DAEMON@home.joesmut.com Thu Sep 4 20:17:25 2003
Return-Path: <MAILER-DAEMON@home.joesmut.com>
Received: from home.joesmut.com (IDENT:99@localhost [127.0.0.1])
by home.joesmut.com (8.12.4/8.12.4) with ESMTP id h851HNmW015342
for <nobody@home.joesmut.com>; Thu, 4 Sep 2003 20:17:25 -0500
Received: from localhost (localhost)
by home.joesmut.com (8.12.4/8.12.4/Submit) id h851HL3X015341;
Thu, 4 Sep 2003 20:17:25 -0500
Date: Thu, 4 Sep 2003 20:17:25 -0500
From: Mail Delivery Subsystem <MAILER-DAEMON@home.joesmut.com>
Message-Id: <200309050117.h851HL3X015341@home.joesmut.com>
To: nobody@home.joesmut.com
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="h851HL3X015341.1062724645/home.joesmut.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
hoping this helps in some way.