I shouldn't get a NO and a OK, should I? I should only get the NO. Strict IMAP clients could get confused.
* OK dbmail imap (protocol version 4r1) server 2.1 ready to run . LOGIN test test . NO login rejected . OK LOGIN completed It seems like imapcommands.c should check the return value of dbmail_imap_session_handle_auth(...) 177: dbmail_imap_session_handle_auth(self, self->args[0], self- >args[1]); and "return" immediately if it returns nonzero. An additional result is that 179: db_log_ip(self->ci->ip); is called if imap_before_smtp is true - WHETHER OR NOT the authentication actually succeeded. IMO, the server should hangup if the authentication fails. -- Internet Connection High Quality Web Hosting http://www.internetconnection.net/