On Fri, 7 Sep 2001 23:57:46 -0700, Randy Ryan <[log in to unmask]> wrote: Although the mail passed through the list and went somewhere, and was bounced back, the From: address was unchanged. It was, and remains, [log in to unmask] By your own information, the List Header shows the address [log in to unmask] is an editor of the list, and thus authorized and permitted to send any messages to the list. It does not matter that user@ipaddress may be on review. The did not send the original message, nor resend the 'reflected' mail. In both cases the From: address IS an authorized address to send messages to the list. There is no security exposure. >From: Randy Ryan <[log in to unmask]> >Subject: Re: [OK] weird encounter >Sender: OUR-KIDS <[log in to unmask]> >To: [log in to unmask] >X-To: <user@ipaddress> >Reply-to: Randy Ryan <[log in to unmask]> >Message-id: <[log in to unmask]> >Organization: Our-Kids >MIME-version: 1.0 >X-Mailer: Mozilla 4.78 [en] (Windows NT 5.0; U) >Content-type: text/plain; charset=us-ascii >Content-transfer-encoding: 7bit >Delivered-to: [log in to unmask] >X-Accept-Language: en >Approved-By: Randy Ryan <[log in to unmask]> >Approved-By: OUR-KIDS <[log in to unmask]>