>>>>> "ML" == Mitchell Leben <firstname.lastname@example.org> writes:
ML> As someone pointed out here a few days ago, sending a
ML> 'which .' gives all subscribers to all lists.
No, it does not. It gives at most $max_which_hits addresses, unless that
variable is undefined or zero, in which case it gives all subscribers. So
set $max_which_hits to something small, like 2, in order to avoid
disclosing all subscribers. 'which' is an important command for users who
don't know the exact form of address they subscribed with; they can figure
it out themselves without bugging the list owner.