|Might as well be equivalent to subscribing as anonymous.  The only way to
|actually control this is to have subscription by owner, and for security
|reasons, validate=all would be helpful to to prevent somebody from
|spoofing your address to sign either themself or other people to your
|list.

Another options exists in order to reduce the effect of spoofed email
subscriptions (where CONFIRM has not been enabled):

* DEFAULT-OPTIONS= NOMAIL

with appropriate prose in the WELCOME file (as to how to turn ON
distributions -- this then becomes both a CONFIRMATION mechanism and a
LISTSERV driver's license).

From time-to-time, you could issue the LISTSERV(R) command:

Q listname WITH NOMAIL FOR *@*

and see who is currently not receiving your list distributions (assuming
they are NOT using the WWW int'f).

/Pete