On Tue, 29 Jun 1999 11:34:05 -0400, Frank FitzMaurice <[log in to unmask]> wrote:

>Ben, my first idea was to use the log file. I use the "Change-Log= Yes"
>keyword with my list. However, initial subscription requests, which
>generate the CONFIRM1 reply, are not showing up in the CHANGELOG file. Is
>there another log I can access as a list owner?
>

CHANGELOG only logs the subscriber when the subscription is confirmed and added
to the list.  Persons awaiting confirmation are not yet members of the list so
this does not appear in the changelog.  It does appear in the regular LISTSERV
log file.

>Ben, this may be trival but I don't see why getting a copy of the
>confirmation message would be a security issue. The list owner controls the
>templates and any commands in them. Is the list owner a security threat? Am
>I missing something?

When LISTSERV sends multiple, equivalent confirmation requests at the same time,
it assigns a separate 'cookie' code number to each address it sends to, so that
the code can be logged and traced.  If the Owner (or anyone else) were sent a
confirmation request whose code has been assigned to a different address, this
is by definition a violation of LISTSERV's internal security protocols and it
won't do it.