From owner-freebsd-questions@FreeBSD.ORG  Fri May 27 03:17:31 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 75BA5106564A
	for <freebsd-questions@freebsd.org>;
	Fri, 27 May 2011 03:17:31 +0000 (UTC)
	(envelope-from jbiquez@intranet.com.mx)
Received: from intranet.com.mx (intranet.com.mx [200.33.246.7])
	by mx1.freebsd.org (Postfix) with ESMTP id 4CDA88FC0C
	for <freebsd-questions@freebsd.org>;
	Fri, 27 May 2011 03:17:31 +0000 (UTC)
Received: from PC2.intranet.com.mx (189.241.20.244) by intranet.com.mx with
	ESMTP (EIMS X 3.3.9) for <freebsd-questions@freebsd.org>;
	Thu, 26 May 2011 22:04:41 -0500
X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9
Date: Thu, 26 May 2011 22:03:16 -0500
To: freebsd-questions@freebsd.org
From: Jorge Biquez <jbiquez@intranet.com.mx>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Message-ID: <3389310281-258946398@intranet.com.mx>
Subject: Disable or limit email in root?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 May 2011 03:17:31 -0000

Hello all.

Is it possible that the root user can be limited to send email only 
for activities realetd to the server and only locally?

or

limit the amount of root user can send.

I have a 7.3 small server working as secondary dns, 3 domains for 
http and email. very few traffic. Using sendmail, the default one.

IN some way a spammer could tell root to send LOT emailes.
I detect it , I guess when they started.I did not know how they did 
it, apparently with a program injection or similar strategy since it 
seems they do not enter the server, for what I have checked until now.

Can be restricted the root user? ON the side of the OS or the sendmail.

Suggestions on how to avoid this again.

The password for root was VERY strong. I do not think they access it. 
I guess when I configured the email and server let something open so 
root was forced to do that.

Thanks in advance

Jorge BIquez