[RCU] Sending spam with my roundcube :(

Thomas Bruederli roundcube at gmail.com
Thu May 28 22:30:41 CEST 2009

kazabe wrote:
> Hi.
> Im detecting that in my roundcube logs:
> [...]
> All that are spam.
> I only permit send my using auth, but this problem is very recurrent.
> How can i prevent that?
Actually a valid session is required to send mails from RoundCube.

Maybe you can get the according requests (and referers) from your access 
log. Just compare time stamps to find the right ones. This might give 
you/us an idea how this could happen.

One possibility is some session take-over by from a currently logged in user.

List info: http://lists.roundcube.net/users/

More information about the users mailing list