If your Long Distance calls are being correctly routed via your LD Provider it most probably means that the calls are being originated from within .
I assume there is a Carrier override code programmed into your system to route calls to your long distance provider which means the code is inserted BY THE SYSTEM prior to digits being sent to line.
Check your system speed dial entries and check if the number is in speed dial store-for no other reason than to remove it.The person responsible may simply have it in their personal speed dial .
If you don't normally call Guantanamo, and have to dial an access code to ring there, bar this code in the system .
But, I feel sure,once you analyze you SMDR records you will find the culprit.