Are any other sites seeing groups of mangled subscription attempts to some small subset of your lists? I'm getting the feeling that someone may be working on a decendant of KABOOM. The following sample is not edited at all. -Kary ------------------- Message causing the problem (6 lines) --------------------- Received: from tw_email.barak.net.il (212.29.202.159) by maelstrom.stjohns.edu (LSMTP for OpenVMS v1.1a) with SMTP id <[log in to unmask]>; Wed, 1 Mar 2000 10:56:37 -0500 Received: from 206.253.202.82 (mg-206253202-82.ricochet.net [206.253.202.82]) by tw_email.barak.net.il with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id FP6KV7VD; Wed, 1 Mar 2000 18:02:01 +0200 Subject: subscribe SUBSCRIBE Munirah Firstname Lastname ------- End of forwarded message -------