Just got a piece of spam to a PostgreSQL list which was to "undisclosed-recipients". Seems like Majordomo ought to be able to filter out BCCs for all public lists.
Yes, I've seen these come through a couple times on the Testers list. Not sure how they're getting through anyway. Don't they have to be registered? Otherwise I'd expect them to require moderation.
