Only a wild guess: Did you set: disable_plaintext_auth = no? I've the default (disable_plaintext_auth = yes + ssl*) settings. _Sometimes_ I find log entries like: dovecot: pop3-login: Disconnected (tried to use disabled plaintext auth): rip=1.2.3.4, lip=5.6.7.8, mpid=0
Oh, and only pop3-login, no attacks against imap-login. Regards, Pascal -- The trapper recommends today: fabaceae.1020...@localdomain.org
