LeeAnne,
Here is a copy of the "view source" from the message.
It seems incomplete. I don't see an X-Received field that shows the actual receipt from the source. That was probably below the X-YMailISG: field which ended your copy.
In any case, what is there, and what was in the activity log you sent me off list indicate that the spam actually came from that member's AOL account, and that the member is not moderated (the word "Accepted" in the log means that approval was not required):
So the mystery is that it seems turning off Messages-Who can post is apparently ineffective somehow for this one member (the other messages, before and after, we'll have to presume were bounced because the Who can post is off).
My suggestion would be to check the member's Posting Privileges. Is it possible the member is set to "Override - messages are not moderated"? It would seem like an absurd bug, but perhaps that's overriding the access control.
If my inference that the member's AOL account is compromised is correct, you should probably make sure she's moderated at groups.io too, just in case.
sorry for the extra space but I can't figure out how to get rid of it.?
Not sure where it went. I guess groups.io's pending message editor stripped it.
Shal
Shal Farley