If the client is inept enough to run Exchange 2000 for only a handful of users, you're probably wasting your time attempting to sanitize IMAP commands.If your contract with them mandates that you secure their server, you'll most likely have to replace their broken software.
There are over 500 users on the server, however there are only a few external users.
I'm really not trying to justify a business case here, I'm just trying to get an IMAP connection.
Terry
