Disable or limit email in root?

[Robert Simmons]

On Fri, May 27, 2011 at 12:16 AM, Jorge Biquez <jbiquez at intranet.com.mx> wrote:
> I am trying to find if sendmail was the problem or what... thing is not that
> root receive email but that root was used to send email to a list of
> address...

Was the root account on the box actually used, or did someone spoof
email coming from root on the box?  Did you receive a spam report
about email coming from the IP address of the box?  Do you have the
header of the email/s in question?  Is sendmail running locally, or is
it running SMTP on an open port?