You may use EDITOR as alternative to Confirm.

With confirm, a request is sent to the FROM: address of the incoming
message and nothing else happens until the response arrives.

With the list (or subscriber) in Moderation/Review mode, the incoming
message is sent to one or more specified Editors for confirmation before
distribution.  Thus the SEND address does not have to be an actual
mailbox address.

You may define the Editor(s), and set the REVIEW subscriber attribute on
the allowed SEND address, then all messages from that address will be
routed to the Editor(s) for confirmation.  Or you may define the
Editor(s) and set the List to Moderated mode.

But, to avoid having spam distributed, you have to use one or the other,
or both, confirmation techniques.  It's unfortunate but the world is
overrun with greedy spammers.

Activating the spam filter capability in your LISTSERV system
(http://www.lsoft.com/news/techtipLSV-issue1-2010-us.asp) is helpful too.

On 1/14/2015 10:36 AM, Andrew Kelly wrote:
> Reviewing this thread I still need one point of clarification on this topic:
>
> Background:
> I've got a number of distribution lists that are used to send newsletters and items of
> similar content, sometimes to tens of thousands of subscribers. Yesterday for the first
> time in several years of use I experienced a successful mis-use if one of the
> lists. Somebody out "in the wild" successfully sent a mail to one of my major distribution
> lists by spoofing thier address. They had simply taken the sender address of a recent
> mail to the list, and sent their mail using that as the From: address.
>
> Is a Send=Owner really that trivial to bypass? Is my only protection against this type of
> thing to force a "confirm" as well? I hope not. I want these mailings to be sent by
> an umbrella account, that doen't really reach a real person. I'd much prefer being able
> to send with a given address, but have a totally different value delivered in the From:
> field with the actual mail.
>
> For example, if I had a list with the following:
> [log in to unmask]
> Send=Owner
>
> Is there any way to send a mail as [log in to unmask] but have the mail reach recipients
> as
> From: [log in to unmask]
>
> Or am I forced to make all my lists send=owner,confirm?
>
> Andy

############################

To unsubscribe from the LSTOWN-L list:
write to: mailto:[log in to unmask]
or click the following link:
http://peach.ease.lsoft.com/scripts/wa-PEACH.exe?SUBED1=LSTOWN-L&A=1