>Does this mean you can't SERVE OFF a "trusted" but broken MAILER ? Yes, you can SERVE OFF a mailer, but this has a nonzero effect only if the NJE origin or 'From:' field contains this address. >Still this doesn't answer the question about the peer. It says >"Processing mail from POSTMASTER@...." or does a peer look at some >X-LSVxxxx tag for the SERVE check? The origin is extracted from the X-LSVOPT tag, but only after the SERVE check. But anyway the message probably came in with a 'From:' field containing that address (this LSVOPT business is to defeat mailers or gateways which convert hostnames or insert % routings, you want the same 'From:' origin in the archives of all the peers to avoid confusion). You should be able to SERVE OFF that origin, though (says he after looking at the code); just watch the nodeid and case. If the nodeid is the local node, it means the mailfile from the peer contained invalid data or a bad address in the 'From:' field, etc (this should not happen); if it is the nodeid of the peer list, it means this peer detected the error and substituted POSTMASTER locally, but maybe their mailer changed it to domain form, or something like that. The best is probably to hold the list and intercept one of the postings in question. Eric