Thanks, that's very informative and sounds like just the thing we need. His current isp is not allowing the use of its smtp anyway, so I'm thinking what we need to do is shut down the use of his domain name for email use totally. I'd thought there should be a way to use his own smtp, but I don't think I'm clever enough to figure out a way so he does not have to use web-based mail for sending. And, in any case it's been spoofed enough that it's been blacklisted so he cannot ascertain whether the mail he DOES send makes it to its destination.
Oh, I should probably also mention that he uses an email forwarding service so no mail is going or coming directly, anyway. As for keeping a "close watch on email sent from your email server" -- is there an automatic log or something? Pardon my ignorance, but you KNOW you are dealing with
vps rookies sometimes, don't you? ;-)