Any PN module, block or hack that sends an e-mail message to people who are rejected must allow for a fake admin e-mail address or none at all if the site's address is to be protected from spammers.
Any form that allows input from the unregistered must include blocking capabilities (see below) in order to protect the site from an endless stream of submissions by spammers.
Please see this brief article