I am implementing this differently from the patch. It will be a site option, not a list setting. The implementation is not a complete solution to the problem as it doesn't address mail to the -join, -leave, -subscribe or -unsubscribe addresses as mail to these doesn't contain commands. It does check that mail to -confirm does contain a token (To: matches VERP_CONFIRM_REGEXP), but not whether the token is valid. I am also implementing another option to not include any 'spam' payload in the response to email commands which will help in some cases, but there is still a problem with From: containing a spamtrap address. ** Changed in: mailman Importance: Undecided => High ** Changed in: mailman Status: Confirmed => In Progress ** Changed in: mailman Milestone: None => 2.1.15 -- You received this bug notification because you are a member of Mailman Coders, which is subscribed to GNU Mailman. https://bugs.launchpad.net/bugs/410236 Title: mailman responds to mail with no valid command