On Mon, 25 Aug 1997 14:51:55 -0400, "Alperin, Glenn" <[log in to unmask]>
wrote:

>I've been toying with the idea of editing my header to read
>
>*Subscription= By Owner, confirm
>
>Is this valid syntax,

Alas, no.  The Confirm is ignored.  The purpose of 'confirm' is to for
LISTSERV to send an 'OK' confirmation msg (requiring a reply) to any person
subscribing themselves.  If it's a non-real address the confirm is never
delivered, nor responded to, and expires after a set time.

When the Owner subscribes a person, they use the ADD command which bypasses
the need for a 'confirm' since LISTSERV assumes the Owner has done this by
other means.

However, you are right in that a knowledgable person could fake your
OwnerID address and issue commands in your place.

The way to prevent this is to set * Confirmation= Yes  This requires all
command msgs to be either confirmed by your Personal Password, (which the
spoofer probably won't know) or by the 'OK' confirm mechanism which would
come back to your address alerting you to something irregular going on.

The only problem with this is affects all commands by everyone, including
users attempting to SET their own options or even to unsubscribe.  Whether
or not this is too onerous for your list members you need to decide.  There
is a trade-off to the increased security this setting affords.

Read Appendix B of the Owner manual about Confirmation= keyword for full
details.
--
 ________________________________________________________________________
 Ben Parker .....(Oak Park IL -> Denver CO) ..... [log in to unmask]