>
> It's possible to unsubscribe e-mail addresses without the subscriber
> authorization, simply sending an e-mail to the list with the
> unsubscribe command?
>

Yes, if the address can be forged to look like it came from the correct user
and your list header keywords allow it.

> It's possible to deactivate this possibility?
>


Without seeing your list header the best suggestion would be to code in
Validate= All,Confirm.  This should force an UNSUBSCRIBE command to either
require a personal password or go through an OK Confirmation.  Note that the
Validate= keyword can behave quite differently depending on what's already
in the header so make sure you read up on it in the List Owner's Manual
first.

--
Chazzozz!!

Michael Shannon
Webmaster
[log in to unmask]

"Before you can grow old and wise you must first survive being young and
stupid." - Ancient Proverb

Note: Opinions expressed on this list are my own and do not reflect the
views, opinions or position of my employer.  If swallowed, seek medical
advice.