6
First thing is to shutdown sendmail right now. Kill all the dangling processes, now. Then analyze your needs, do you even need sendmail running/listening at all?
You should have a firewall but that won't fix your sendmail mis-configuration. You are configured to allow mail relay from any source and the spammers have now found out. Can you say a million messages per day and a very angry ISP?
Does the server recieve email or relay mail for other machines? If not you don't need sendmail running at all, the local machine can spawn sendmail when it needs to. If you do need it running you must configure it to only allow hosts to use it that you trust.
Configure the local access tables to allow only services you need and block the rest. But this gets into things way beyond XOOPS or the scope of this message.