Q. What "autorespond" does esec require for vacation messages? A. try: gcc -O2 contrib/autorespond.c -o /usr/local/bin/autorespond Q. I just got a peice of spam: How did it get through?? A1. You may be using low mode, in which case a spammer has simply confirmed his email address. Enable high security mode. UPDATE accounts SET mode = 3 WHERE email = 'user@example.com'; A2. Check the Internet header of the message. Towards the top you will see the X-ESec-Notes field, which will explain why the message was placed in your Inbox. If the email does not have an X-ESec-Notes field, ESec was not involved in the delivery of this email. Check the Delivered-To field, and check that you have a valid .qmail-username set up for that address. Q. These people who I've never heard of before are complaining that they are receiving confirmation probes to messages they've never sent me. What can we do about this? A1. Configure the plugin option, to help determine if the originating email is spam. This can dramatically reduce the problem. ( i.e. --probe-plugin=/usr/local/bin/spamc --plugin-args='-c' ) A2. Ask the complainee to talk to his ISP about adding SPF and DomainKeys records to his domain, and use them yourself. http://spf.pobox.com/ & http://domainkeys.sourceforge.net/ Q. Why do I get all these bounces in my Inbox?? A1. This most often happens if you are manually deleting messages from the pending queue. If you delete a message, and ESec receives a bounce to it's probe, then it doesnt know that it originally sent the probe, and assumes the bounce is due to a message that you sent. Just stop mucking with the messages, and let Email Secretary handle them for you. A2. You may be being joe-jobbed. See: http://www.google.com/search?q=joe-job ESec knows that it didnt send a message to the person in question, and therefor assumes that you must have. Both cases could be fixed by the author enabling random return path address-extensions -- which is in TODO. Q. How can I give you some extra money that I have laying around? A. Paypal! send it over to paypal@at@jeremykisterc.om. Q. What is the difference between low, medium and high security mode? A. Using low mode, an unknown sender has an easier time confirming his address: he can simply reply to the confirmation message (either manually, or automatically), or can load the URL given in the probe. Medium mode requires the user to load the URL given in the probe. Using high mode, an unknown sender must load the URL provided in the confirmation probe, and must correctly answer a random question that you have inserted into the 'challenges' table. Q. How can I make ESec handle my alias email addresses without making seperate mailboxes and accounts? A. echo '|/usr/local/script/esec.pl main@example.com' > ~vpopmail/domains/example.com/.qmail-alias Q. How do I make the funny looking password for the crypt field ? A. Use the included 'printcrypt' command included in the contrib directory. Q. How can I whitelist everyone @example.com ? A. In your Email Whitelists, enter ([a-z0-9_\.\+\-\=\?])+@example.com Q. How can I put everyone in my Microsoft Outlook's "Contacts" in my email whitelist? A. Simply go to File -> Import and Export -> Export to a file -> Comma Separated Values (DOS) -> (Choose Contacts folder) -> Next -> Follow Directions. Load the eseccgi.pl in your browser, login, click Edit next to Email Whitelists, click Browse to the right of "File Containing addresses", select the file you saved from Outlook, click OK, click Upload (next to browse). Other methods may also work.