On  6 Oct 98 at 9:15, Pete Weiss wrote:

> Finally, you could "force" a PROBE.

Unfortunately, a probe probably wouldn't do much good in this case. A
probe relies on the bouncing mail server to bounce to the correct
address (RFC821 MAIL FROM) whereas these "reflected" e-mails are a
case of a very broken mailer bouncing mail back to the list address
(which means it's using the To:, Sender:, or possibly Reply-To:
address -- whichever it is, it's the wrong thing to do and the probe
won't catch it :-(  ).

Jacob, you need to follow the headers and determine at which point it
started heading back to the list. Then do a scan on your list for
that domain, and delete whoever you find with an address there. If no
one is there, it may be that another address is forwarded and so you
need to back up a bit in the received headers to find the subscribed
address. If you're not sure which address is the culprit, you can
temporarily set your suspects to FULL822, so that the headers can
tell you exactly which address it is.

Francoise