Here is the somewhat "official" answer on the state of the mailing list:
1. The list is not now, nor ever has been, open-posting. Posting is restricted to subscribers, or to those users local to cmu.edu. The spam posts that make it through the to the list do so because they are sent with forged From addresses from list members or cmu.edu addresses. 2. The list is virus scanned. We run ClamAV called from sendmail before any list processing is done. Messages which fail the virus test are rejected with an SMTP error at the time of submission. The messages which started this thread made it through to the list because ClamAV did not yet have a signature for this particular variant. No antivirus solution is perfect, and messages will make it through. 3. We're going to be moving off of the current Majordomo server to a new GNU Mailman based server in the near future. No further development is planned for the current service for this reason. -jeaton -- Jeffrey T. Eaton esp [EMAIL PROTECTED] Research Systems Programmer Carnegie-Mellon University --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html