I just found out that someone used my server to send quite a lot of spam, I'm still not sure if I was able to plumb this security hole.