Could you please let me know how/where you emailed this to, so I can check if we ever received it. We frequently get emails sent in and reply only to never hear from the user again (I guess many problems turn out to me misconfigurations or the users own code, plus some users are simply rude I guess). We've also had reports sent in via the contact us box that have not email address's that bounced (I guess the emails were typos). All emails sent from the security alias include it as a cc to ensure that the mail transmits (i keep copies of all mail to and from the accont) - if the user doesn't receive it because of their own spam filter theres not much we can do. I'd recommend that if you're going to email security@dotnetnuke.com , you add that address as a safe sender in your spam software.

Thanks,

Cathal