Kai:
If it's really spam straight to "root@domain" a simple "root@domain nouser" in virtusertable or access.db should usually solve the problem as cron rather sends to "root" or "root@localhost".
That is the best solution.
Thanks, Neil
-- Neil Aggarwal, (832)245-7314, www.JAMMConsulting.com Eliminate junk email and reclaim your inbox. Visit http://www.spammilter.com for details.