somehow, a spammer is sending out from he, but not through open relay. I've checked ORDB, and I'm clean, but I'm getting huge numbers of emails being sent (I assume via SMTP) showing up in my IMS outbound Queue.
Destination hosts are random, but the Originator shows up as an outside address...