Bob, 
  Here's the header on one I'm questioning:
Return-Path: 
                      <tclug-list-admin at mn-linux.org>
            Received: 
                      from sprite.real-time.com
                     
(IDENT:SxHzZYq7CROanH6krZ/uAjAq4EV45tOv at lists.real-time.com
[206.10.253.8])
                      by mail.swdata.com (8.11.2/8.11.2) with ESMTP id
f327RP313684; Mon, 2 Apr 2001
                      02:27:25 -0500
            Received: 
                      from sprite.real-time.com
                     
(IDENT:JiFC5UY7qOUXbFvzWT3O3iF4ylov0nVQ at localhost.localdomain
[127.0.0.1])
                      by sprite.real-time.com (8.11.1/8.11.1) with ESMTP
id f326jEG10338; Mon, 2 Apr
                      2001 01:45:14 -0500
            Received: 
                      from johnson (swtp222-17.adsl.seed.net.tw
[211.74.222.17]) by
                      sprite.real-time.com (8.11.1/8.11.1) with SMTP id
f325SDG09104 for
                      <tclug-list at listserv.real-time.com>; Mon, 2 Apr
2001 00:28:14 -0500
         Message-ID: 
                      <200104020528.f325SDG09104 at sprite.real-time.com>
                From: 
                      ¥i·Rªº°Êª«©R½L at real-time.com
                  To: 
                      ª¾¤vª¾©¼...... at lists.real-time.com
       MIME-Version: 
                      1.0
       Content-Type: 
                      multipart/related; type="multipart/alternative";
                     
boundary="----=_NextPart_Bpb480Kv6Q0UvUjQKPzauX16bG"
            X-Mailer: 
                      r9c7KYM8yxW07kEA3iXlaeCWv
           X-Priority: 
                      3
   X-MSMail-Priority: 
                      Normal
              Subject: 
                      [TCLUG] ¥ß¨è¶EÂ
§A©pªº­Ó©Ê¡B¥»½è¡Bªí­±¡B·N§Ó¡B­y¹D¡B½t¤À...
              Sender: 
                      tclug-list-admin at mn-linux.org
           Errors-To: 
                      tclug-list-admin at mn-linux.org
        X-BeenThere: 
                      tclug-list at mn-linux.org
 X-Mailman-Version: 
                      2.0.3
          Precedence: 
                      bulk
            Reply-To: 
                      tclug-list at mn-linux.org
           List-Help: 
                     
<mailto:tclug-list-request at mn-linux.org?subject=help>
            List-Post: 
                      <mailto:tclug-list at mn-linux.org>
      List-Subscribe: 
                     
<https://mailman.mn-linux.org/mailman/listinfo/tclug-list>,
                     
<mailto:tclug-list-request at mn-linux.org?subject=subscribe>
              List-Id: 
                      Twin Cities Linux Users Group Mailing List
<tclug-list.mn-linux.org>
   List-Unsubscribe: 
                     
<https://mailman.mn-linux.org/mailman/listinfo/tclug-list>,
                     
<mailto:tclug-list-request at mn-linux.org?subject=unsubscribe>
         List-Archive: 
                     
<https://mailman.mn-linux.org/pipermail/tclug-list/>
                Date: 
                      Mon, 2 Apr 2001 00:28:14 -0500
    X-Mozilla-Status: 
                      8001
   X-Mozilla-Status2: 
                      00000000
              X-UIDL: 
                      ild!!FdA!!JSE!!J+%#!

I'm thinking that either someone has spoofed the system, or your mail
server has been compromised.  I noticed that one came through earlier in
html that had a ton of oriental lettering.  This one with the header is
a "zoological astrology" or something.


Bob Tanner wrote:
> 
> Quoting Shawn (fertch at mninter.net):
> > Bob, any chance that the Oriental e-mails that came through the list
> > yesterday have any relations?  Anyone able to read them things??
> 
> Don't know, but I contacted UUNet and Sprint and their filters are still getting
> a pounding. Mix of TCP, UDP and ICMP, so I need to keep it offline. :-(
> 
> Sprint is working with their "other branch" (whatever that means) to help stop
> the attack.