On Mon, 25 Aug 1997 14:51:55 -0400, "Alperin, Glenn" <[log in to unmask]> wrote: >I've been toying with the idea of editing my header to read > >*Subscription= By Owner, confirm > >Is this valid syntax, Alas, no. The Confirm is ignored. The purpose of 'confirm' is to for LISTSERV to send an 'OK' confirmation msg (requiring a reply) to any person subscribing themselves. If it's a non-real address the confirm is never delivered, nor responded to, and expires after a set time. When the Owner subscribes a person, they use the ADD command which bypasses the need for a 'confirm' since LISTSERV assumes the Owner has done this by other means. However, you are right in that a knowledgable person could fake your OwnerID address and issue commands in your place. The way to prevent this is to set * Confirmation= Yes This requires all command msgs to be either confirmed by your Personal Password, (which the spoofer probably won't know) or by the 'OK' confirm mechanism which would come back to your address alerting you to something irregular going on. The only problem with this is affects all commands by everyone, including users attempting to SET their own options or even to unsubscribe. Whether or not this is too onerous for your list members you need to decide. There is a trade-off to the increased security this setting affords. Read Appendix B of the Owner manual about Confirmation= keyword for full details. -- ________________________________________________________________________ Ben Parker .....(Oak Park IL -> Denver CO) ..... [log in to unmask]