>this has opened me up >to anyone reading *and* posting news on our server :( I believe that the problem is the default user in the auth default. This bit me too, but I don't think it's a bug.