[9fans] spam originating from a Plan 9 installation

[mirtchov@cpsc.ucalgary.ca]

[-- Attachment #1: Type: text/plain, Size: 1713 bytes --]

I found this in /mail/queue/none after seeing the message being
rejected by aol's mail server.  The mail logs show that 'none' has
been able to send messages at least a few times:

home% cat smtp | grep none
plan9 Nov 15 20:37:25 moranpm (at) uprunsystem.com sent 3421 bytes to budmanone23 (at) aol.com, mdpascual (at) aol.com, nyanta13 (at) aol.com
plan9 Nov 16 05:49:12 mmtski (at) tealjim9.us sent 4025 bytes to eightfthogg2 (at) aol.com, jrl400 (at) aol.com, coachfxb (at) aol.com, quinonesd (at) aol.com, cheezliz8 (at) aol.com, falkra (at) aol.com, shpeka (at) aol.com
plan9 Nov 16 06:18:26 angell78 (at) anybizcorp.biz sent 2925 bytes to jjjjjstone (at) aol.com, mabaclstl (at) aol.com, fierwal (at) aol.com, powerforward22 (at) aol.com, greenone13 (at) aol.com
plan9 Nov 16 07:23:40 seabis (at) lowcomdata.net sent 3500 bytes to herbandalt (at) aol.com, fuzionone (at) aol.com, townflorist (at) aol.com, jdmlimited (at) aol.com, lilyzryder80 (at) aol.com
plan9 Nov 16 08:44:32 burkemay (at) webrunstatus.biz sent 2355 bytes to dki63 (at) aol.com, valpodad (at) aol.com, plucsious (at) aol.com, mshsurvey (at) aol.com, dohito (at) aol.com, nonesa (at) aol.com, rcl1011 (at) aol.com
home%


but I still have time before I'm thrown in the blacklists on all mail
servers.

how do I fix this?  has anyone else experienced it, or is it a problem
with my configuration?

note, the emails are modified (@->at) to protect the innocent, and the
body of the spam message isn't attached, just the header and the
error.

I ran 'history' on the logs to see if any previous months show
successful spam delivery but there's nothing in there since june,
which is how far my venti goes.

andrey

[-- Attachment #2.1: Type: text/plain, Size: 308 bytes --]

The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Disposition: attachment; filename=C.029885
	Content-Type: text/plain; charset="US-ASCII"
	Content-Transfer-Encoding: 7bit

[-- Attachment #2.2: C.029885.suspect --]
[-- Type: application/octet-stream, Size: 101 bytes --]

mail lowdowncomp.us!wildcat7 net!aol.com aanecessary8 nikeadict machi1313 groupstein theboss155 psci7

[-- Attachment #3.1: Type: text/plain, Size: 308 bytes --]

The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Disposition: attachment; filename=E.029885
	Content-Type: text/plain; charset="US-ASCII"
	Content-Transfer-Encoding: 7bit

[-- Attachment #3.2: E.029885.suspect --]
[-- Type: application/octet-stream, Size: 101 bytes --]

Sun Nov 16 09:27:59 MST 2003 connect to net!aol.com:
connection closed unexpectedly by remote system