==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- Related log if you're reporting an issue:
====

iRedAdmin-Pro on CentOS MySQL.

The dashboard home page displays the "Top 10 Senders" on the screen.  When reviewing this design, is this ALL Outbound e-mail from the system? 

I ask because I see e-mail addresses which are NOT on our system. For example: there is a series of facebookmail.com messages.  When select it using the link on the screen, it takes you to the tab page of "Sent Mails", it shows a recipient which is one of our users.  There is nothing under the "Recieved Mails" tab or "Quarantined Mails" tab.   We have a couple of e-mail senders that are not on our system but they show in the Top 10 Senders.  How is this possible or designed?  Could it be a breach in a user password, some relay occurring that we're missing, or what? 

Is there a specified time period that the "Top 10 Senders" is calculated? 
For example: the senders display there for that day's use, the life of a log or database entry period or what criteria determines who and when they appear on Top 10 Senders?

Is the page designed so that the counts build on number of recipients or e-mails only. 
Example: if user_A_@domain.tld has a forward to user_B_@domain.tld on the system.  An e-mail comes in to user_A_@domain.tld which then forwards to user_B_@domain.tld.  Would that be one (1) e-mail or two(2)?   
Or,
If user_C_@domain.tld creates one (1) e-mail on the system and includes it to five (5) recipients outside the system...  is that one (1) e-mail message or five (5) e-mails outside system? 

Thank you.