We have hit a very odd problem at the maelstrom listserv that I think is a bug and potentially a security problem. I had a day earlier in the week, and then today where posts that had been submitted a few days earlier suddenly showed up on the list. The only difference, other than the header information I'll detail below, is the banner is duplicated. That is particularly odd is it appears that a roadrunner server is receiving the posts, then reinjecting the posts back to the listserv, and the listserv software is passing them on. I run a semi-moderated lists. Two of the posts I had to approve for distribution. The duplicates came though without requiring confirmation. Of the duplicates, non originate from roadrunner. Then, after getting the duplicates, another duplicate post claiming that it originated from my list address came back to me for approval. And a user just forwarded an error from the listserv claiming they had exceeded their posting limit. The post was another duplicate already posted (and not needing moderator approval) May 6. > show license License type: Permanent Expiration date: None - perpetual license Capacity: Unlimited Product options: HPO Version: 1.8d Serial number: STJOHNS-VM-TESHPO-1T Build date: 16 Jul 2000 Email of one of the duplicates: -------- Original Message -------- Return-path: <[log in to unmask]> Received: from mta1.snfc21.pbi.net (mta1-pr.snfc21.pbi.net)by sims2.snfc21.pbi.net(Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9) with ESMTP id<[log in to unmask]> for jrryan@sims-ms-daemon; Sat,10 Mar 2001 15:31:28 -0800 (PST) Received: from maelstrom.stjohns.edu ([149.68.45.24])by mta1.snfc21.pbi.net (Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9)with ESMTP id <[log in to unmask]> [log in to unmask]; Sat, 10 Mar 2001 15:30:37 -0800 (PST) Received: from maelstrom.stjohns.edu (149.68.45.24)by maelstrom.stjohns.edu (LSMTP for OpenVMS v1.1a)with SMTP id <[log in to unmask]>; Sat,10 Mar 2001 18:30:31 -0500 Received: from MAELSTROM.STJOHNS.EDU by MAELSTROM.STJOHNS.EDU(LISTSERV-TCP/IP release 1.8d) with spool id 1591357 [log in to unmask]; Sat, 10 Mar 2001 18:30:30 -0500 Received: from mail.satx.rr.com (24.93.35.55)by maelstrom.stjohns.edu (LSMTP for OpenVMS v1.1a)with SMTP id <[log in to unmask]>; Sat,10 Mar 2001 18:30:30 -0500 Received: from mail pickup service by mail.satx.rr.com with Microsoft SMTPSVC;Sat, 10 Mar 2001 17:30:20 -0600 Received: from mail pickup service by mail.satx.rr.com with Microsoft SMTPSVC;Fri, 09 Mar 2001 20:56:19 -0600 Received: from maelstrom.stjohns.edu ([149.68.45.24]) by mail.satx.rr.com withMicrosoft SMTPSVC(5.5.1877.537.53); Tue, 06 Mar 2001 15:55:33 -0600 Received: from maelstrom.stjohns.edu (149.68.45.24)by maelstrom.stjohns.edu (LSMTP for OpenVMS v1.1a)with SMTP id <[log in to unmask]>; Tue,06 Mar 2001 16:46:13 -0500 Received: from MAELSTROM.STJOHNS.EDU by MAELSTROM.STJOHNS.EDU(LISTSERV-TCP/IP release 1.8d) with spool id 1354431 [log in to unmask]; Tue, 06 Mar 2001 16:46:11 -0500 Received: from hotmail.com (64.4.20.185)by maelstrom.stjohns.edu (LSMTP for OpenVMS v1.1a)with SMTP id <[log in to unmask]>; Tue,06 Mar 2001 14:51:45 -0500 Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue,06 Mar 2001 11:51:39 -0800 Received: from 64.60.7.80 by lw14fd.law14.hotmail.msn.com with HTTP; Tue,06 Mar 2001 19:51:39 +0000 (GMT) Date: Tue, 06 Mar 2001 11:51:39 -0800 From: username <[log in to unmask]> Subject: Re: [OK] Is anyone else still getting that HA HA virus? Sender: OUR-KIDS <[log in to unmask]> To: [log in to unmask] X-To: [log in to unmask] Reply-to: username <[log in to unmask]> Message-id: <[log in to unmask]> MIME-version: 1.0 Content-type: text/plain; format=flowed Approved-By: [log in to unmask] X-Originating-IP: [64.60.7.80] X-OriginalArrivalTime: 06 Mar 2001 19:51:39.0359 (UTC)FILETIME=[DBFE1EF0:01C0A676] Approved-By: OUR-KIDS <[log in to unmask]> X-Mozilla-Status: 9015 X-Mozilla-Status2: 00000000 X-UIDL: 3875b2d100006194 text of email (dupped banner shown below) ~~~~~ http://www.our-kids.org/ for Help/Info/Interest ~~~~~ ~~~~~ http://www.our-kids.org/ for Help/Info/Interest ~~~~~