If I'm not mistaken, even with a forged QUIET ADD, LISTSERV(R) returns an
ack to the forged address, namely the forged list-owner.

Now that could be an address different from the NOTIFY= address.

/Pete Weiss