Every night your system does the cron.daily routine and emails you a good deal of information to root@localhost; namely log highlights etc. This shows whos been logging in, and whos be "trying" to log in.
This will send "all" email directed to root@localhost to your specified email address..
Usage: (you must be root for this)
1. cd /root
2. vi .forward
type the following into .forward
3. chmod 755 .forward
Simply remove the .forward file.
1. rm .forward