I wonder why there is no delay after a failed authentification attempt (daemon mode). Should be easy to write a brute-force attack script using RSYNC_PASSWORD... Wouldn't a delay make attacks much more difficult ? Regards, Frank Schaefer