From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: To: 9fans@cse.psu.edu From: mirtchov@cpsc.ucalgary.ca MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="upas-xledkgyghotaacwhwyfqpaavio" Subject: [9fans] spam originating from a Plan 9 installation Date: Sun, 16 Nov 2003 09:47:58 -0700 Topicbox-Message-UUID: 8afad386-eacc-11e9-9e20-41e7f4b1d025 This is a multi-part message in MIME format. --upas-xledkgyghotaacwhwyfqpaavio Content-Disposition: inline Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit I found this in /mail/queue/none after seeing the message being rejected by aol's mail server. The mail logs show that 'none' has been able to send messages at least a few times: home% cat smtp | grep none plan9 Nov 15 20:37:25 moranpm (at) uprunsystem.com sent 3421 bytes to budmanone23 (at) aol.com, mdpascual (at) aol.com, nyanta13 (at) aol.com plan9 Nov 16 05:49:12 mmtski (at) tealjim9.us sent 4025 bytes to eightfthogg2 (at) aol.com, jrl400 (at) aol.com, coachfxb (at) aol.com, quinonesd (at) aol.com, cheezliz8 (at) aol.com, falkra (at) aol.com, shpeka (at) aol.com plan9 Nov 16 06:18:26 angell78 (at) anybizcorp.biz sent 2925 bytes to jjjjjstone (at) aol.com, mabaclstl (at) aol.com, fierwal (at) aol.com, powerforward22 (at) aol.com, greenone13 (at) aol.com plan9 Nov 16 07:23:40 seabis (at) lowcomdata.net sent 3500 bytes to herbandalt (at) aol.com, fuzionone (at) aol.com, townflorist (at) aol.com, jdmlimited (at) aol.com, lilyzryder80 (at) aol.com plan9 Nov 16 08:44:32 burkemay (at) webrunstatus.biz sent 2355 bytes to dki63 (at) aol.com, valpodad (at) aol.com, plucsious (at) aol.com, mshsurvey (at) aol.com, dohito (at) aol.com, nonesa (at) aol.com, rcl1011 (at) aol.com home% but I still have time before I'm thrown in the blacklists on all mail servers. how do I fix this? has anyone else experienced it, or is it a problem with my configuration? note, the emails are modified (@->at) to protect the innocent, and the body of the spam message isn't attached, just the header and the error. I ran 'history' on the logs to see if any previous months show successful spam delivery but there's nothing in there since june, which is how far my venti goes. andrey --upas-xledkgyghotaacwhwyfqpaavio Content-Type: multipart/mixed; boundary="upas-mwzipswiqldxytmckffdsvqtqt" Content-Disposition: inline This is a multi-part message in MIME format. --upas-mwzipswiqldxytmckffdsvqtqt Content-Disposition: inline Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit The following attachment had content that we can't prove to be harmless. To avoid possible automatic execution, we changed the content headers. The original header was: Content-Disposition: attachment; filename=C.029885 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit --upas-mwzipswiqldxytmckffdsvqtqt Content-Type: application/octet-stream Content-Disposition: attachment; filename="C.029885.suspect" mail lowdowncomp.us!wildcat7 net!aol.com aanecessary8 nikeadict machi1313 groupstein theboss155 psci7 --upas-mwzipswiqldxytmckffdsvqtqt-- --upas-xledkgyghotaacwhwyfqpaavio Content-Type: multipart/mixed; boundary="upas-cuseastgpyrmmdwfejyymprafn" Content-Disposition: inline This is a multi-part message in MIME format. --upas-cuseastgpyrmmdwfejyymprafn Content-Disposition: inline Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit The following attachment had content that we can't prove to be harmless. To avoid possible automatic execution, we changed the content headers. The original header was: Content-Disposition: attachment; filename=E.029885 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit --upas-cuseastgpyrmmdwfejyymprafn Content-Type: application/octet-stream Content-Disposition: attachment; filename="E.029885.suspect" Sun Nov 16 09:27:59 MST 2003 connect to net!aol.com: connection closed unexpectedly by remote system --upas-cuseastgpyrmmdwfejyymprafn-- --upas-xledkgyghotaacwhwyfqpaavio--