At 10:14 03/14/2003 Friday, Valdis Kletnieks wrote:
 >On Fri, 14 Mar 2003 09:07:51 CST, Jane K Gehan <[log in to unmask]>  said:
 >> Many of our lists - lists that are not open subscription, and are
 >> confidental - have the following address on their monitor report.
 >> This address is not on any of the subscription lists. And it doesn't
 >> look like it ever was if I look at the modification date of the .list
 >> file.  Any idea on what might be happening here?
 >
 >I've seen it get confused when bounces arrive in bad formats or from
 >the addresses that the recipient address is forwarded to....
End Reply

Could this not be a spoofed OWMER-listname@listhost as the RFC821 MAIL
FROM field with a bounce with a spoofed RCPT TO that then showed up in
DMR? e.g., KLEZ