Dev

dev@lists.roundcube.net

1 participants
4293 discussions

Spam suggestions?
by Brennan Stehling 05 Jan '07

05 Jan '07

I have been using SpamAssassin, but I have had problems where incoming spam causes the server to become unresponsive for long periods of time. This is obviously unacceptable. I am pretty sure the biggest part of the problem is that fact that is running with Perl. I have had problems with Perl before when I wrote CGI applications where it can lock up a server if you are handling a lot of data. I specifically have it set to only handle messages under a certain size, but I still have problems. I host other things on the same server, like my DNS and Web servers so I cannot allow the spam filter to kill the performance of all applications. Is there something better that I could do? I am seriously considering having all of my mail aliased to my Gmail account and not allow incoming mail to be stored on this server. If I do that I will not be using RC, which I would like to continue using and helping with the development effort. Brennan Stehling Offwhite.net LLC brennan(a)offwhite.net

5 7

Re: Googlespell and mod_security?
by Robert Bertram 04 Jan '07

04 Jan '07

Hi Phil, Thanks for your reply. Roundcube did something funny with it though. Now that I've hit reply I can see what your wrote. I'll check the archive later to see if I missed anything. Sorry, I meant to put more information in and forgot. I'm running a default install of Fedora Core 5 with Apache2, PHP5, MySQL, Dovecot and sendmail. I'm also only using the beta version of Roundcube. As to the ruleset, I'm using those from gotroot which can be found here. http://www.gotroot.com/mod_security+rules but not all. I have added the following to the base rules in mod_security.conf. Using them all can load up your server. The error logs seem to relate to useragents. You could try just that file if the rest are too hard on your server. Include /etc/httpd/modsec/apache2-rules.conf Include /etc/httpd/modsec/rules.conf Include /etc/httpd/modsec/rootkits.conf Include /etc/httpd/modsec/useragents.conf Include /etc/httpd/modsec/recons.conf Include /etc/httpd/modsec/badips.conf # Include /etc/httpd/modsec/blacklist.conf Include /etc/httpd/modsec/blacklist2.conf Include /etc/httpd/modsec/jitp.conf # Include /etc/httpd/modsec/proxy.conf I should highlight I've only seen it the once, you might end up waiting a long time to see it happen if at all. Regards, Robert. PS as to the display problem of the email, instead of seeing Phil's reply I see this bit of code. I've attached the source of his reply as well. __removed="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> On Thu, 4 Jan 2007 08:28:04 -0600, "Phil Cryer" <phil.cryer(a)gmail.com> wrote: > On 1/3/07, Robert Bertram <kraekan(a)westnet.com.au> wrote: >>, >> Hi, >> >> I am wondering if anyone uses Roundcube with mod_security on Apache? I > got >> some 406's from logwatch this morning. >> >> Requests with error response codes >> 406 Not Acceptable >> snip< >> /?_task=mail&_action=spell〈=en: 3 Time(s) >> >> The previous day while writing some emails I ran the spell checker to > get >> an error message indicating a problem with the server. The relating > error >> logs point to IP's in South East Asia. >> >> Mod_security seems to be doing its job but I wondering if anyone with > more >> experience that myself has noticed this as well? And if it's a problem? >> Could just be a problem with the Google servers? > > > > I have not seen this, however I haven't been on Roundcube with an SVN > lately. What version are you running? Are you running any custom rules > in > mod_security, or just the core? I have it installed/running, but haven't > plugged in any custom rules yet, but am happy to try and reproduce > (freebsd, > apache2, mod_sec, php5, mysql5) > > P > > All seems fine today. Spell check runs fine. >> >> Regards, >> >> Robert. >> >> >> >> > > >

1 0

Googlespell and mod_security?
by Robert Bertram 04 Jan '07

04 Jan '07

Hi, I am wondering if anyone uses Roundcube with mod_security on Apache? I got some 406's from logwatch this morning. Requests with error response codes 406 Not Acceptable snip< /?_task=mail&_action=spell〈=en: 3 Time(s) The previous day while writing some emails I ran the spell checker to get an error message indicating a problem with the server. The relating error logs point to IP's in South East Asia. Mod_security seems to be doing its job but I wondering if anyone with more experience that myself has noticed this as well? And if it's a problem? Could just be a problem with the Google servers? All seems fine today. Spell check runs fine. Regards, Robert.

2 1

Spam harvesting concerns
by Michael J. Phillips 04 Jan '07

04 Jan '07

I just saw that everyone who posts to the mail list has there email pasted on the net for spam bots. This is how a couple of my email addresses got ruined by spammers. There needs to a a regex replace filter or something for emails to get emails in name at domain dot com format or something, otherwise everyone posting to the list is going to see spam rates OCTUPLE! i.e. http://lists.roundcube.net/mail-archive/roundcube.dev/2006/12/seq/ Michael Phillips

5 5

SVN 439/440; settings dialog
by Robin Elfrink 04 Jan '07

04 Jan '07

Hi, SVN 440 introduced a bug that prevents me from clicking the 'Save' button on the settings page. I found that on my system rc_substr uses mb_substr now, and somehow that causes following change in output of the HTML: ==================================== --- substr.html 2007-01-03 15:59:19.582425500 +0100 +++ mb_substr.html 2007-01-03 15:59:02.676391900 +0100 @@ -173,7 +173,8 @@ </script> -<script type="text/javascript"> +</body> +</<script type="text/javascript"> <!-- if (window.call_init) ==================================== Now I have absolutely no experience with multibyte strings, so somebody else will have to figure out why mb_substr() causes to add '</body>' and one too many '</' to the HTML output. Robin

3 3

3 new feature ideas.
by Michael Phillips 02 Jan '07

02 Jan '07

I would like to add some functionality to roundcube. 1. The ability to check box to automatically sign in next time or to just save the login. The information would be stored in a cookie that expired in like 30 years, if people on the development team think its ok to store the password it would be done in a hash obviously but everyone's imap/pop client would have to support the hash then. 2. For visually impaired people, have a selector for font size that simply changes the css or a high contrast theme. I think it would also be neat to use flite (http://www.speech.cs.cmu.edu/flite/doc/index.html) for text to speech. There would be a link that could be enabled which when clicked would let them save the message as a wav file, then play it back in audio form. I already do this for captchas on my websites. I'm sure most visually impaired people already have software on their computer do this, but they are probably all windows people. this could allow visually impaired people in linux or other less supported OSs to get an audio version of their email. Some web applications sport a logo indicating compliance with http://www.section508.gov/. 3. GnUPG support, I would like to add the ability sign or encrypt messages. A user could paste their private key into a form that then saved it on the server in sql. There is probably a huge security issue with saving private keys on a server. I don't know of a php API, I would most likely use exec(); Please email me any comments, questions or concerns. Michael Phillips

10 9

dev sandbox
by Michael J. Phillips 02 Jan '07

02 Jan '07

Does anyone see value in setting up a sandbox/testing website. I was think of writing a public website to sign up for real email account that interfaces with the latest svn of roundcube. Maybe modify the interface to have a bug reporting links and or comments on known issues. This would probably increase bug finding rates dramatically. Michael Phillips

2 1

A bug in a parser for sqlite dsn ?
by black.myst＠free.fr 31 Dec '06

31 Dec '06

Hello I don't know if it's a bug, but I have lost many time yesterday with that. First, I installed a roundcube with sqlite and the sample configuration "sqlite://./sqlite.db". It work :-). Yesterday, I want to move my db to another directory, "/var/roundcube/roundcube.bd". I updated my db.inc.php with the new db_dsnw "sqlite:///var/roundcube/roundcube.db". It doesn't work :-(, I have the screen with error "Error No. 1f4)". After research, config is parsed by "parseDSN()" of DB.php with the patern "phptype://hostspec/database". sqlite://./sqlite.db phptype = sqlite hostspec = . database = sqlite.db ==> sqlite use the file "sqlite.db" (In fact, it's the same that './sqlite.db'). sqlite:///var/roundcube/roundcube.db phptype = sqlite hostspec = database = var/roundcube/roundcube.db ==> this config doesn't work. sqlite:////var/roundcube/roundcube.db phptype = sqlite hostspec = database = /var/roundcube/roundcube.db ==> this config works. Maybe I'm an idot to try 'sqlite:///var/roundcube/roundcube.db' but I think it is more intuitive than 'sqlite:////var/roundcube/roundcube.db'. I'm not sure that is possible to fixe the function 'parseDSN()' because we can't do a generic solution for parse "mysql://localhost/db" and "sqlite://path/to/db". The solution is maybe to add a note to db.inc.php.dist to explain the problem. Black Myst. PS : If you think it's a bug, I will open new ticket tomorrow

2 1

Thai Translation for roundcube
by San 31 Dec '06

31 Dec '06

Now I have translate in Thai language, thank for live translator. Then I already update some label since from 0.1beta2 -- Sincerely, Nantharat Puwarang Sansez [at] Gmail [dot] com LPIC-1 : Linux Professional Institute Certified

2 1

Development Guidelines (finally)
by Thomas Bruederli 31 Dec '06

31 Dec '06

Hi everybody I finally made it to write some basic Development Guidelines that should give new developers a short overview about the structure and the rules of the RoundCube code base. Please read it carefully: http://trac.roundcube.net/trac.cgi/wiki/Dev_Guidelines And remember: it's a Wiki. So please correct mistakes or extend the page with missing details. Regards, Thomas

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Dev