Received: from unknown (HELO meals) ([EMAIL PROTECTED]) by xxx.yyy.zzz with SMTP; 22 Oct 2004 11:46:16 -0200
It looks like he's coming from IP 218.61.42.211, and authenticating as '123'.
Do you have a user 123 in your default domain, or as a system user? Is user 123's password easy to guess?
Actually, it looks like your AUTH installation is broken -- you can auth as any user on your system.
Take a look at the run file for qmail-smtpd. There are two types of patch, and yours is the one that requires a hostname after qmail-smtpd and before vchkpw. Fix the run script and then restart qmail-smtpd and you'll be fine.
-- Tom Collins - [EMAIL PROTECTED] QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/ Info on the Sniffter hand-held Network Tester: http://sniffter.com/