Hi, I just checked the most recent (available) vopopmail-5.3.27.
Here, you inclued CRAM-MD5 support from Krzysztof Dabrowski. This implementation is broken; it does not confirm with Dan Bernstein's checkpassword API. Dan requires: user0password0 or - in case of C/R - user0response0challenge0. Krzysztof Dabrowski has implemented: user0challenge0response. This badly breaks the checkpassword interface. Don't promote that. More infos: http://www.fehcom.de/qmail/spamcontrol/README_spamcontrol.html I will provide a patch soon. regards. --eh. Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de/ Wiener Weg 8, 50858 Cologne | T: +49 221 484 4923 | F: ...24