>I am the administrator for a MD 1.94 list. I have noted that the WHO
>is not restricted in any way. I can send a WHO command without being
>subscriber and get a list of subscribers email address.
You should configure the list.config file, in the Lists directory, one
of the last options in the file is in respect of the behavior of WHO
command, there are other options there interesting to prevent SPAM, as
restrict post only to listmembers and so on...Just read the comments
in file carefully...