By posting this message I am publicly confirming that I am a moron.  But I'm
posting anyway because I do not see any mention of this in the manual, or in
the archives (at least not the last several years).  Yes, it should have
been obvious, but it wasn't until I got an error message from the server
about an  attempt to do the STATS command that I suddenly realized that any
spammer with this file could easily pop all my subscribers' addresses into
whatever mailing list he wanted to, despite my closing REVIEW.

There's no mention of STATS settings in the manual, but I tried
STATS= Normal,Owner
and that seemed to work.  I strongly recommend that this be added to the
manual, and that listowners be made aware of this security problem.  In this
day and age it should be a default setting.  If a spammer wants e-mail
addresses make em work for it.

What else am I missing?

=======================================================================
Mike Holloway           |* On average, 9 people/day on the waiting
[log in to unmask]  lists die for lack of a donor.
________________________|* The end-stage diseases treated by
  transplant do not recognize age, race, nationality or pocketbook.
* There is no justifiable reason to deny organ donation, but many
  myths and misunderstandings.
* Next of kin must allow donation.  Your family must know your wishes.
* Only a small fraction of the next of kin of potential donors allow
  donation to take place.
* In general, medical professionals do not recognize their obligation
  to support and promote donation.
Questions? See FAQ:
http://www.faqs.org/faqs/by-newsgroup/bit/bit.listserv.transplant.html
======================================================================