any ideas what's up with this package? or how I go about fixing it? when I search sourceforge for webmin I just get sent to www.webmin.com... which is where I am downloading the rpm from.

[root@nagios Download]# yum localinstall webmin-1.470-1.noarch.rpm
Loaded plugins: refresh-packagekit
Setting up Local Package Process
Examining webmin-1.470-1.noarch.rpm: webmin-1.470-1.noarch
Marking webmin-1.470-1.noarch.rpm to be installed
Resolving Dependencies
--> Running transaction check
---> Package webmin.noarch 0:1.470-1 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================
Package Arch Version Repository Size
=============================================================================
Installing:
webmin noarch 1.470-1 webmin-1.470-1.noarch.rpm 15 M

Transaction Summary
=============================================================================
Install 1 Package(s)
Update 0 Package(s)
Remove 0 Package(s)

Total download size: 15 M
Is this ok [y/N]: y
Downloading Packages:
warning: rpmts_HdrFromFdno: Header V3 DSA signature: NOKEY, key ID 11f63c51


Public key for webmin-1.470-1.noarch.rpm is not installed
[root@nagios Download]#

Yum checks for GPG signature in your database and if it is not found it refuses to install the package. You have to import the GPG key:
(as root) then try to install webmin again with yum.

rpm --import http://www.webmin.com/jcameron-key.asc - question about this jcameron-key.asc part...was that info posted on their web page, or how did you know about it? I just searched their web page and found no mention of this key

I checked their website: http://www.webmin.com/rpm.html. Yum is more "suspicious" than rpm and want to verify the GPG signature of the package against the current database. And usually when someone releases some signed packages, he provides the GPG key as well.