smartlist question

I just read this on another list and was wondering if it is true:

I spoke too soon about smartlist - it lets anyone post to it regardless of if they are a subscriber or not and regardless of what the 'access' is set. There is another hole that a person can send messages to a smartlist list by adding -dist to the end of a listname (Ie: testlist-dist@lists.mzaus.com) so I decided not to use SmartList.

... is that the case? I need a lightweight list program but would like to have only people who are subscribed to the list be able to post.

TIA,

-- Mark

In the context of CGI programming Perl is like duct tape whereas C is like 2 part quick hardening epoxy. --smithj@ulv.edu on the oclug list