On Tue, 25 Apr 1995, Chris Barnes wrote: > I am in the process of trying to track down a person that was trying to > spoof our listserv into subscribing someone else. I have checked the > listserv console log file and found where the event occurred, but > what I really need is the actual file that was sent to listserv (to > look at the headers). > > Does listserv keep those things somewhere (gee I hope so). I could be wrong, and I will likely be corrected in mins., but I don't think you can get that info from Listserv, and what you see in your logs maybe be the only header available. That is, it may be the same header that you will find in your system syslog file. You should have the userid and addr from the listserv logs. That is all you really need to make a complaint to the postmaster. One word of caution. We get a lot of bogus sub requests for userids at sites where the userid does not exist....but the site does. The most recent one was a sub request to a list were the user put in the mail: To Whom it may concern...etc.... and LISTSERV properly subed Whom@host.name..... even in a sig file I have found that if 'to word' (where 'word' can be anything) appears in col one, listserv will treat 'word' as a userid and append the original senders address to the request. All of these generate error messages, but they are really innocent. I hope this helps in some small way. --Trish