Actually, the list in question includes a server which is routed through SEARN but no longer exists, leading to a bounce from MAILER@SEARN with full header info. People keep writing to [log in to unmask] for more info and more log correlation and promise that they will sue the perpetrator to make a precedent, etc. But so far I have yet to hear of any lawsuit, for the very simple reason that the traces invariably point to dialup123.xyz.net, and you don't know who was calling it at the time. In most countries, acquiring or releasing the information to a third party requires a warrant. And your sole evidence is a piece of electronic paperwork with obscure symbols and one dialup123.xyz.net somewhere in the middle. What is the next step? Eric