On Wed, 7 Apr 1999 09:34:30 -0500, Gary Klass <[log in to unmask]> wrote:

>Recently I sent a message directly to a subscriber who used the Eudora
>redirect option to send a message back to the list.  It went out directly
>to the list with the "from" header below:
>
>"Gary Klass (by way of tangela williams <[log in to unmask]>)"
>              <[log in to unmask]>
>
>This represents a serious security problem, in this case especially because
>the message contained the happy99.exe virus.
>
>Is anyone else aware of this happening?

This is the way Eudora's 'redirect' has always worked and it it very
non-standard per the usual mail standards RFCs.  I suggest you change the list
header to Send= Editor,Hold

Then all you need do is reply to the confirmation message that LISTSERV sends
you with the one word 'OK'

With Send= Editor , LISTSERV sends you the entire message and you must resend it
back to LISTSERV with the proper 'resent-' header lines.  Eudora cannot do this.

With Send= Editor,Hold  LISTSERV retains the original of the message, sends you
a 'request for confirmation' to which you reply OK (which Eudora will do nicely)
and then LISTSERV releases the message.