How do you have bounced unauthorized emails sent to you instead of the list owner?
I set restrict_post = listname in the list config file to prevent non-members from
using the list. This should cut out spam email from the outside of the company.
Eduardo V deRivas