Dedicated Server Security Issue Resolution

Hello, I've got 2 linux servers (we'll call them "server a" and "server b" that are set up the same, both hosting different sites. Here is my problem: 1. On server A, there appears to be some sort of security breach where someone is able to queue up the mail queue with tons of outbound spam messages that are never sent (because the servers aren't configured to send email). They just keep queuing up, filling the "messages" log file, etc... I need someone with some knowledge to go in, find out how it's happening, and stop it... 2. On server A, the "secure" log is huge because of consistent brute force attacks... passwords are pretty good, but I'd like someone to put in some measures to limit this brute forcxe (sshd) activity. Whatver solution goes into server A, I'd like it to be applied to server B as well. 3. On server A , I am supposed to get sendmail emails to me when certain events happen...it seems sendmail is not working on either server, so I need to make sure the problem is fixed and I'm able to get this notifiacation emails again. 4. Disable logins by the root user without breaking any existing crons or other functionality in both server A and server B, and create some other method to use root functionality. ------------------------ If these 4 things go well, I'd like to consider keeping you as my "server admin" on a contract basis. There isn't a whole lot of work involved as my server admin...I only ask for you to monitor the servers to make sure sites are up, fix any outages, etc... and handle any of my small periodic requests... and of course keep tabs on security and monitor log files on a weekly basis. ## Deliverables 1) Complete and fully-functional working program(s) in executable form as well as complete source code of all work done. 2) Deliverables must be in ready-to-run condition, as follows (depending on the nature of the deliverables): a) For web sites or other server-side deliverables intended to only ever exist in one place in the Buyer's environment--Deliverables must be installed by the Seller in ready-to-run condition in the Buyer's environment. b) For all others including desktop software or software the buyer intends to distribute: A software installation package that will install the software in ready-to-run condition on the platform(s) specified in this bid request. 3) All deliverables will be considered "work made for hire" under U.S. Copyright law. Buyer will receive exclusive and complete copyrights to all work purchased. (No GPL, GNU, 3rd party components, etc. unless all copyright ramifications are explained AND AGREED TO by the buyer on the site per the coder's Seller Legal Agreement). ## Platform Server A is: CentOS Linux 4.2 Server B is: Redhat Linux Fedora 4