At 09:22 PM 12/18/2000 -0700, you wrote:
>On Mon, 18 Dec 2000 20:03:26 -0500, Gilles Frydman <[log in to unmask]> wrote:
>
> >I believe that only the listowners got spammed.
> >But it looks like the spammers used home to relay.
> >Am I correct in my assumption?
>
>Not exactly.  The ACOR node is hosted on the HOME machine, along with about 30
>other virtual hosting nodes.  The mail is sent to the listname-REQUEST@host
>address.  Since this is an address intended to reach the List-Owner(s) it
>cannot
>be blocked or filtered.  The mail did transit HOME but not in any improper
>way.
>Mail to the listname-REQUEST@host address must be handled by LISTSERV and
>forwarded to the list owner(s).  The only defense the List Owner has is a
>certain degree of tolerance, a readiness with the DELETE key and a good set of
>personal mail filters.


Thank you Ben.
You've just confirmed my thought.
There is nothing like a good set of personal filters:-)

Can you explain to our listowners why those addresses appear in the error
log of their list, even though they weren't subscribed to the lists?
I don't have the answer to that part of their request.

Gilles Frydman
ACOR.org