qmail smtp authentication

Hi, somebody somehow is authenticating trough my qmail server and sending
mails out.

I would like either to disable SMTP authentication or to understand where
the login/pass is getting from. I have a mysql base and pop3 is going via
qmail-sql.

A log looks like that:

220 myserver ESMTPM
EHLO smtp039.mail.yahoo.comM
250-myserverM
250-AUTH=LOGINM
250-PIPELININGM
250 8BITMIMEM
AUTH LOGINM
334 VXNlcm5hbWU6M
d2VibWFzdGVyM
334 UGFzc3dvcmQ6M
d2VibWFzdGVyM
235 go aheadM

As fas as i understand, the user/pass is d2VibWFzdGVy/d2VibWFzdGVy?

tnx & br,
Greg

* "Gregor Rot" <(E-Mail Removed)>
| AUTH LOGINM
| 334 VXNlcm5hbWU6M
| d2VibWFzdGVyM
| 334 UGFzc3dvcmQ6M
| d2VibWFzdGVyM
| 235 go aheadM
|
| As fas as i understand, the user/pass is d2VibWFzdGVy/d2VibWFzdGVy?

Hint: AUTH LOGIN uses base64 encoding as the obfuscation mechanism.

R'

< Ralf Fassel
>* "Gregor Rot" <(E-Mail Removed)>
>| AUTH LOGINM
>| 334 VXNlcm5hbWU6M
>| d2VibWFzdGVyM
>| 334 UGFzc3dvcmQ6M
>| d2VibWFzdGVyM
>| 235 go aheadM
>
>Hint: AUTH LOGIN uses base64 encoding as the obfuscation mechanism.

This is decoded to -->
334 Username: webmaster
334 Password: webmaster

Possibly, Spam Kiddie|Spamafia are sending huge unsolicited emails.
Who is using "webmaster"? Do you know the originated IP address?

--
Regards, RainbowHat. To spoof or not to spoof, that is the IPv4 packet.
----+----1----+----2----+----3----+----4----+----5----+----6----+----7