- Users - Roundcube mailing lists

Security Update 1.3.6 released
by Thomas Bruederli 11 Apr '18

11 Apr '18

Dear subscribers We just published a security update to the stable version 1.3. It primarily fixes a recently reported IMAP command injection vulnerability caused by insufficient input validation within the archive plugin. Details about the vulnerability are published under CVE-2018-9846. Additionally, we back-ported some minor fixes from the master branch which improve PHP 7.2 compatibility as well as PGP signing and key handling for those who use the Enigma plugin. See the full changelog in the release notes on the Github download page: https://github.com/roundcube/roundcubemail/releases/tag/1.3.6 We strongly recommend to update all productive installations of Roundcube with this new version. Updates for older LTS versions will follow soon. And as usual: please do backup your data before updating! Best, Alec & Thomas

1 0

Roundcube Carddav and Enigma plugins
by David Mehler 10 Apr '18

10 Apr '18

Hello, I'm wanting to get the carddav and enigma plugins going. When I turn on carddav then attempt a log in I get a blank screen. Whenever I turn on enigma I am wanting to make keys, this does not appear possible. Any suggestions welcome. Thanks. Dave.

2 7

markasjunk2 plugin using rspamd
by David Mehler 10 Apr '18

10 Apr '18

Hello, Is it possible to hook the markasjunk2 plugin in with rspamd? I'd like to either mark a message as junk or not junk and have rspamd be retrained. Thanks. Dave.

1 0

roundcube custom tls verification options
by David Mehler 09 Apr '18

09 Apr '18

Hello, Is it possible to do custom connection information? This is how my config.inc.php file looks: $config['default_host'] = 'tls://localhost'; $config['imap_conn_options'] = array( 'ssl' => array( 'verify_peer' => false, 'verify_peer_name' => false, ), ); $config['smtp_server'] = 'tls://localhost'; $config['smtp_conn_options'] = array( 'ssl' => array( 'verify_peer' => false, 'verify_peer_name' => false, ), ); $config['include_host_config'] = array( 'webmail.domain1.com' => 'domain1_config.inc.php', 'webmail.domain2.com' => 'domain2_config.inc.php', ); what I'm wanting to do is tighten my tls verification options. My domains each use a different letsencrypt certificate. What I'm wanting to add is something like: // For STARTTLS IMAP $config['imap_conn_options'] = array( 'ssl' => array( 'verify_peer' => true, // certificate is not self-signed if cafile provided 'allow_self_signed' => false, // 'cafile' => '/etc/ssl/certs/Your_CA_certificate.pem', // For Letsencrypt use the following two lines and remove the 'cafile' option above. 'ssl_cert => '/etc/letsencrypt/live/mail.my_domain.org/fullchain.pem' 'ssl_key' => '/etc/letsencrypt/live/mail.my_domain.org/privkey.pem' // probably optional parameters 'ciphers' => 'TLSv1+HIGH:!aNull:@STRENGTH', 'peer_name' => 'mail.my_domain.org', ), ); // For STARTTLS SMTP $config['smtp_conn_options'] = array( 'ssl' => array( 'verify_peer' => true, // certificate is not self-signed if cafile provided 'allow_self_signed' => false, // 'cafile' => '/etc/ssl/certs/Your_CA_certificate.pem', // For Letsencrypt use the following two lines and remove the 'cafile' option above. 'ssl_cert => '/etc/letsencrypt/live/mail.my_domain.org/fullchain.pem' 'ssl_key' => '/etc/letsencrypt/live/mail.my_domain.org/privkey.pem' // probably optional parameters 'ciphers' => 'TLSv1+HIGH:!aNull:@STRENGTH', 'peer_name' => 'mail.my_domain.org', ), ); Can I put a config in each of the domain specific files? Thanks. Dave.

3 3

Print ALL mails in a folder to PDF files
by Philip Rhoades 08 Apr '18

08 Apr '18

People, Is there some way of CLI scripting RCM to print all the mails in a particular Maildir to separate PDF files? - it would be far to slow to do one at a time from the GUI . . Thanks, Phil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

1 0

feature request
by Webert de Souza Lima 06 Apr '18

06 Apr '18

Because of the problem I have described recently in the email entitled: "Unable to send command: A0007 FETCH 1:* (UID BODY.PEEK[HEADER.FIELDS (FROM)])" I would like to request a feature: clear ordering preference. That would make the sort as the default again. How is that likely to be done? I'm not sure I can request any features. Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil* *IRC NICK - WebertRLZ*

2 3

problem with the carddav plugin
by David Mehler 04 Apr '18

04 Apr '18

Hello, I'm running the latest roundcube stable. I am having an issue with the carddav plugin. When I load it and restart apache to resource the roundcube I am seeing this in the roundcube/logs/errors file: [04-Apr-2018 12:40:32 America/New_York] PHP Warning: dns_get_record(): DNS Query failed in /usr/local/www/roundcube/plugins/carddav/carddav_discovery.php on line 207 [04-Apr-2018 12:40:32 America/New_York] PHP Warning: usort() expects parameter 1 to be array, boolean given in /usr/local/www/roundcube/plugins/carddav/carddav_discovery.php on line 220 [04-Apr-2018 12:40:32 America/New_York] PHP Warning: Invalid argument supplied for foreach() in /usr/local/www/roundcube/plugins/carddav/carddav_discovery.php on line 224 [04-Apr-2018 12:40:32 America/New_York] PHP Warning: dns_get_record(): DNS Query failed in /usr/local/www/roundcube/plugins/carddav/carddav_discovery.php on line 252 [04-Apr-2018 12:40:32 America/New_York] PHP Warning: Invalid argument supplied for foreach() in /usr/local/www/roundcube/plugins/carddav/carddav_discovery.php on line 253 [04-Apr-2018 12:40:32 America/New_York] PHP Fatal error: Call to undefined function raise_error() in /usr/local/www/roundcube/plugins/recipient_to_contact/recipient_to_contact.php on line 61 I have not altered carddav_discovery.php in any way. If anyone has a fix i'd love to know it. Thanks. Dave.

1 0

Useradd to MySQL
by Andreas Meyer 02 Apr '18

02 Apr '18

Hello! I just stumble a bit understanding at what time a user is added to the db-table roundcubemail/users. Usually my users are stored in the db mailbox at the server. Is the db roundcubemail used at all then? Kind regards Andreas -- PGP-Fingerprint: D392 5D21 0299 63D7 5BAE 4562 1E56 B2EA 81A2 59F1

2 1

roundcube quota
by David Mehler 02 Apr '18

02 Apr '18

Hello, I've got a postfix virtual mail server setup going and using Roundcube as webmail. I've got MySQL database serving quota and both Dovecot and Postfix are configured to utilize it. I'd like to get roundcube working with quota. I'd appreciate any suggestions. Thanks. Dave.

3 3

managesieve plugin
by mick crane 02 Apr '18

02 Apr '18

hello, having some bother getting managesieve plugin to work. worked with previous install of roundcube, was called managesieve in webpage settings/filters now is called roundcube. Is writing filter rules to ~/sieve/roundcube.sieve but emails are not moved. is Roundcube Webmail 1.3.5. Debian testing. dovecot --version 2.2.35 (b1cb664) is just for local network. I don't know what is the problem. Probably something dumb. did these things from various destructions on internet > apt-get install dovecot-sieve dovecot-managesieved --- > in /etc/dovecot/conf.d/20-lmtp.conf we add this: > protocol lmtp { > postmaster_address = postmaster(a)YOUR-DOMAIN.com > mail_plugins = $mail_plugins sieve > } (didn't have 20-lmtp.conf but installed it just in case that was the problem) apt install dovecot-lmtpd ---- > edit /etc/dovecot/conf.d/90-sieve.conf and inside “plugin” > configuration add: > sieve = ~/.dovecot.sieve > sieve_global_path = /var/lib/dovecot/sieve/default.sieve > sieve_dir = ~/sieve > sieve_global_dir = /var/lib/dovecot/sieve/ (left this bit alone as sieve = file:~/sieve;active=~/.dovecot.sieve was already there, there is a link in ~/ to ~/sieve/roundcube.sieve) ---- > edit /etc/dovecot/conf.d/20-managesieve.conf for enable listing on port > 4190, >this should be >the top of config file: > ## > ## ManageSieve specific settings > ## > > protocols = $protocols sieve > > # Service definitions > > service managesieve-login { > inet_listener sieve { > port = 4190 > } (can't remember if this was there or not but is now ) ---- > service dovecot restart ---- > > If you try to telnet 4190 it should answer as follow > > root@server:/# telnet 127.0.0.1 4190 ( this works get # telnet 127.0.0.1 4190 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. "IMPLEMENTATION" "Dovecot (Debian) Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext" "NOTIFY" "mailto" "SASL" "PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." ) ---- > Activate the plugin in roundcube config file > roundcube_folder/config/config.inc.php: > $rcmail_config['plugins'] = array(......, 'sieverules'); don't have sieverules plugin have managesieve and is $config['plugins'] not rcmail_config ---------- # telnet 127.0.0.1 143 Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE START TLS AUTH=PLAIN] Dovecot ready. mick -- Key ID 4BFEBB31

1 1

Re: [RCU] managesieve plugin
by mick crane 01 Apr '18

01 Apr '18

On 2018-04-01 21:21, Reindl Harald wrote: > > breaking news: paths may differ and files can be created > > since i don't use dovecot at all nor offer sieve to the public i'm done > here, the point was that sieve is a service/protocol on the mailserver > and not just random files in the webmail installation - normally you > don't even run any webserver on the mail machine at all clearly but this is not facing the big bad world. thanks for your efforts. all I want to do is put mail in folders. did it before with procmail if I can't sort this shortly will try some other way. mick -- Key ID 4BFEBB31

1 0

Re: [RCU] managesieve plugin
by mick crane 01 Apr '18

01 Apr '18

On 2018-04-01 20:02, Reindl Harald wrote: > Am 01.04.2018 um 20:57 schrieb mick crane: >> On 2018-04-01 19:36, Reindl Harald wrote: >>> Am 01.04.2018 um 19:59 schrieb mick crane: >>>> having some bother getting managesieve plugin to work. >>>> worked with previous install of roundcube, was called managesieve in >>>> webpage settings/filters >>>> now is called roundcube. >>>> Is writing filter rules to ~/sieve/roundcube.sieve but emails are >>>> not >>>> moved. >>>> is Roundcube Webmail 1.3.5. Debian testing. dovecot --version >>>> 2.2.35 >>>> (b1cb664) >>> >>> are you aware that sievie normally is a *network service* as you even >>> quoted here and hence normally you don't spit files from a website >>> around to configure your mailserver: >> >> yes well, it is just for me, there is no school near here for this >> stuff >> so rely on things like the dovecot wiki pages to set up. > > you didn't get it > > https://wiki.dovecot.org/Pigeonhole/ManageSieve > https://tools.ietf.org/html/rfc5804 > > you don't create local files from the client - you speak over TCP last time I think I installed pigeonhole and it *just worked* can't find pigeonhole anymore in debian repository is dovecot-sieve and dovecot-managesieve > https://www.rosehosting.com/blog/how-to-set-up-server-side-email-filtering-… > > copy the default configuration file and set the following: > > ## cp config.inc.php.dist config.inc.php > ## vim config.inc.php > ... > $rcmail_config['managesieve_port'] = 4190; before that it says edit Roundcube’s main configuration file and set the following: ## vim +/PLUGINS config/main.inc.php ... $rcmail_config['plugins'] = array('managesieve'); I don't have main.inc.php I guess that is roundcubemail/config.inc.php. > ... > $rcmail_config['managesieve_default'] = > '/etc/dovecot/sieve/default.sieve'; > I don't have /etc/dovecot/sieve >>> ________________ >>> >>> edit /etc/dovecot/conf.d/20-managesieve.conf for enable listing on >>> port >>> 4190, >this should be >the top of config file: >>> ## >>> ## ManageSieve specific settings >>> ## >>> >>> protocols = $protocols sieve >>> >>> # Service definitions >>> >>> service managesieve-login { >>> inet_listener sieve { >>> port = 4190 >>> } >> >> this is there at the top -- Key ID 4BFEBB31

1 0

Re: [RCU] managesieve plugin
by mick crane 01 Apr '18

01 Apr '18

On 2018-04-01 19:36, Reindl Harald wrote: > Am 01.04.2018 um 19:59 schrieb mick crane: >> having some bother getting managesieve plugin to work. >> worked with previous install of roundcube, was called managesieve in >> webpage settings/filters >> now is called roundcube. >> Is writing filter rules to ~/sieve/roundcube.sieve but emails are not >> moved. >> is Roundcube Webmail 1.3.5. Debian testing. dovecot --version 2.2.35 >> (b1cb664) > > are you aware that sievie normally is a *network service* as you even > quoted here and hence normally you don't spit files from a website > around to configure your mailserver: yes well, it is just for me, there is no school near here for this stuff so rely on things like the dovecot wiki pages to set up. > ________________ > > edit /etc/dovecot/conf.d/20-managesieve.conf for enable listing on port > 4190, >this should be >the top of config file: > ## > ## ManageSieve specific settings > ## > > protocols = $protocols sieve > > # Service definitions > > service managesieve-login { > inet_listener sieve { > port = 4190 > } this is there at the top. -- Key ID 4BFEBB31

1 0

Unable to send command: A0007 FETCH 1:* (UID BODY.PEEK[HEADER.FIELDS (FROM)])"
by Webert de Souza Lima 27 Mar '18

27 Mar '18

Hello, I use Roundcube as my main Webmail client and Dovecot as the underlying mail server. Very often, users stumble across the error stated in the subject of this message: * "Unable to send command: A0007 FETCH 1:* (UID BODY.PEEK[HEADER.FIELDS (FROM)])"".* After some research I have learned that this message itself is not where the problem lies, but it's the previous step, where it asks the imap server to sort the fetched headers by date: * "A0006 UID SORT (DATE) US-ASCII ALL"* After some efforts I have learned that Roundcube takes the following steps when opening a given mailbox: Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil* *IRC NICK - WebertRLZ*

2 5

HTML Fonts
by Webert de Souza Lima 27 Mar '18

27 Mar '18

Hello, does roundcube support adding new fonts for html signature/composing? Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil* *IRC NICK - WebertRLZ*

1 1

Request security check failed
by Jorge Bastos 23 Mar '18

23 Mar '18

Hi there, I'm tailing logs to make my installation the stable'est possible, and once in a while I see this in the logs. Should I worry? What does it mean? Mar 23 17:24:37 fastweb roundcube: <9j959159> PHP Error: Request security check failed (POST /webmail/?_task=mail&_action=refresh)

1 0

Rouncdube username problems
by jsmosc 23 Mar '18

23 Mar '18

Hello! Using Centos 7/64 and Webmin/Virtualmin, I have setup Roundcube for one domain (mydomain.com). All is working fine but I have a couple of problems with usernames. First, I wrote an interface to automatically create users at the domain, in Virtualmin (using the Virtualmin API). There, creating a user "test" will make it recorded as "test.mydomain". To log into RoundCube I must enter test.mydomain as username. Then, the RC record of this user is: username: test.mydomain email: test.mydomain(a)mydomain.com I would like this to be: username: test email: test(a)mydomain.com And I would like users to login as "test", simply. Or eventually (but it is worse as "test(a)mydomain.com". I tried changing the config.inc.php details: The defaul was: $config['default_host'] = 'localhost'; I setup $config['default_host'] = 'mydomain.com'; and tried a few things with $config['mail_domain'] and $config['username_domain'] (options %n , %s, etc The result is never what I need... Any suggestion would be welcome, Thank you!

1 0

inbox has no "old" content
by Thing 23 Mar '18

23 Mar '18

Hi, I am just trying to migrate my mail server from Debian 7 on a pi2 using sendmail, dovecot and squirrel-mail to debian9 on a x86 server using sendmail, dovecot and roundcube. So waht I have done is tar zcvf the user's home folder and expanded it on the new server. When I log in with roundcube my inbox is empty but all the old folders are there and have content. I am assuming I have some config to do to get inbox populated but Im scrathcing my head as to what to look at. When i use Thunderbird client instead I get the same issue, so am I right in assuming its a Dovecot issue?

2 1

Re: [RCU] different language
by Andreas Meyer 21 Mar '18

21 Mar '18

Am 21.03.2018 23:02, schrieb Reindl Harald: > which version from which source (tarball, distro-package..) tarball Roundcube 1.3.3 >> In Firefox german is the preffered language > the UI language don't matter - don't confuse langpack under addons for > the browser UI with the preferred content language you can chosse in > the settings between fonts and downloads Could it has something to do with that accidently I logged in one domain-interface to another domain/mailaccount? Kind regards Andreas -- PGP-Fingerprint: D392 5D21 0299 63D7 5BAE 4562 1E56 B2EA 81A2 59F1

1 0

different language
by a.meyer＠nimmini.de 21 Mar '18

21 Mar '18

Hello! Today I installed CentOS and am curious Roundcube has english language after logging in. Is this a browser thing? In Firefox german is the preffered language. Kind regards Andreas

1 0

Re: [RCU] Roundcube Webmail 1.3.5 released
by A.L.E.C 16 Mar '18

16 Mar '18

On 15.03.2018 23:18, Jorge Bastos wrote: > Hi Thomas, > > Thank you and Alec for new relase! > > Just curious, 1.4 has any date already? April or May for the beta release and around 3 months more for stable. -- Aleksander 'A.L.E.C' Machniak Kolab Groupware Developer [http://kolab.org] Roundcube Webmail Developer [http://roundcube.net] ---------------------------------------------------- PGP: 19359DC1 # Blog: https://kolabian.wordpress.com

2 1

Roundcube Webmail 1.3.5 released
by Thomas Bruederli 15 Mar '18

15 Mar '18

Dear subscribers We proudly announce a new service release to update the stable version 1.3. It contains fixes to some issues which we backported from the master branch. One can be called a minor security fix as it fixes blocking of remote content on specially crafted style tags. See the full changelog in the release notes on the Github download page [1]. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net. And stay tuned for the upcoming 1.4 beta release which will include a preview to the new "Elastic" theme. Apropos: we're still looking for a volunteer designer to do the final polishing on the new skin. Read about the progress of the Elastic skin in Alec's blog [2]. Best, Thomas & Alec [1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.5 [2] https://kolabian.wordpress.com/tag/elastic/

2 1

Pop3 push
by Jorge Bastos 14 Mar '18

14 Mar '18

Hi, Is there any plugin for pop3 push? Even that is a commercial one? Thanks in advanced,

1 0

roundcube password plugin changing mysql password
by David Mehler 09 Mar '18

09 Mar '18

Hello, I'm a first time poster. I use Roundcube 1.3.4 on a FreeBSD system. I use postfix which gets it's authentication from dovecot imap server and goes to a MySQL database. I am now wanting to get roundcube's password plugin to be able to change a users password. In the password plugin configuration file I had this originally: update virtual_users set password=CONCAT('{SHA512-CRYPT}', ENCRYPT (%p, CONCAT('$6$', SUBSTRING(SHA(RAND()), -16)))) WHERE user=%u; This didn't work nor did it return any debug information. I then went in to MySQL directly and did this: update virtual_users set password=CONCAT('{SHA512-CRYPT}', ENCRYPT ('PasswordGoesHere', CONCAT('$6$', SUBSTRING(SHA(RAND()), -16)))) WHERE user='Username goes here'; Directly at the MySQL prompt this worked replaced user and password with values and it got returned correctly. I then did this with %p and %u as it appeared that not having them quoted was causing an error. Through none of this am I getting any kind of debug or log output: update virtual_users set password=CONCAT('{SHA512-CRYPT}', ENCRYPT ('%p', CONCAT('$6$', SUBSTRING(SHA(RAND()), -16)))) WHERE user='%u'; I try to change the password and I get brought back to the same screen, no errors on the screen and nothing in a log, the password does not get changed. Any suggestions or ways I can get some logging information? Also, when doing the change at the MySQL prompt I got a warning, doing a show warnings revealed error 1287 that the ENCRYPT function is deprecated and to use AES_ENCRYPT instead. I tried replacing ENCRYPT with AES_ENCRYPT and that didn't work. Any suggestions on either issue welcome. Thanks. Dave.

1 1

Roundcube Display HTML
by Mario Jorge Lima 08 Mar '18

08 Mar '18

Hi, If I let Roundcube to "DISPLAY HTML" for any account, I receive a Error 500 when trying to open an email. WHen I deselect it in "Roundcube >> Settings >> Preferences >> Displaying Messages" everything works. So I need one of these: 1) To solve this Error 500 or 2) To deselect this parameter above for any account, is there a way of setting it as a global parameter? Mario./ ___________________________ Mario Jorge Lima mariolima(a)multisites.com.br OBS: Eventualmente nao acentuo algumas palavras do Portugues, para evitar bugs na recepcao dos emails.

2 3

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users