On 2/19/2008 11:52 AM, Steve Howie wrote:
> Hi
>
> One of our list owners reported a spam message managed to get posted to
> one of his lists, where the sender is not a member of the list.
>
> The posting (obviously forged) came from listname@listserv-hostname  in
> other words, the posting address for the list.
>
> This "username" is not a subscriber to the list. Is it possible for such
> a posting to bypass the Send= settings for the list? It's currently set
> to Subscription= By_Owner and  Send= Service, where Service=
> our-local-email-domain
>

To the best of my knowledge, LISTSERV should not accept a posting where the
sender address is the list address, but there is insufficient information to
do anything more than speculate. It would be helpful to see the list
configuration and the full headers from the message in question.

--
Paul Russell, Senior Systems Administrator
OIT Messaging Services Team
University of Notre Dame
[log in to unmask]