Hi, was there a special reason to "forget" the sleep(3) penalty timeout after an "invalid user" auth nak message? I did that because we had a POP3 client running wild while trying out unknown sasl users... # diff pop3d.c.orig pop3d.c 1220d1219 < prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n"); 1223a1223,1224 > sleep(3); > prot_printf(popd_out, "-ERR [AUTH] Invalid user\r\n"); Pascal ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html