On 12/22/2009 10:14, Steve Eckard wrote:
> Greetings, all. I have a list owner who has an announce only list and for
> some reason has it edited. He states anytime he sends a message to the list
> he gets a Viagra spam message sent to him. I am trying to get more details.
> Any ideas with this little information. He does have several people as
> editors, with him being the first. Thanks.
>

I would start by checking the full message headers on the spam message.  They
will reveal the source of the spam and may help you identify the subscriber from
whose account the spam was sent, though I can imagine scenarios in which the
message headers on the spam will be of no help in identifying the subscriber
from whose account or computer the spam was sent.

Does the spam contain any vestige of the original message?  For example, does
the subject line make it appear that the spam is a reply to the original
message?  If so, send a seperate test message to each subscriber, with the
recipient's address in the subject line.  The subject line on the spam should
identify the subscriber from whose account or computer the message was sent.

--
Paul Russell, Senior Systems Administrator
OIT Messaging Services Team
University of Notre Dame