- Users - Roundcube mailing lists

Adding picture from Windows Photo Viewer to my Roundcube signature line
by DROPS Gear 15 Jul '15

15 Jul '15

does anyone know how to do this? -- David W. Olson 6828 Forestview Drive Lockport, NY 14094 (716) 949-1976 dave(a)dropsgear.com

1 0

Re: [RCU] Attaching files is not working for me, what am I missing?
by Ralph Seichter 13 Jul '15

13 Jul '15

On 28.05.14 00:09, Reindl Harald wrote: > opcache.optimization_level = 0 > and most likelythe instability is gone with no bad impact on performance Thanks, good idea. I tried this, but unfortunately it did not help. Neither did "opcache.enable = 0". > php -m > given that cli and httpd hopefully using the same config # php -m -c /etc/php/apache2-php5.5/ [PHP Modules] bz2 Core ctype curl date dba dom ereg exif fileinfo filter gd gettext gmp hash iconv json ldap libxml mbstring mcrypt mysql mysqli mysqlnd openssl pcre PDO pdo_mysql pdo_sqlite Phar posix readline Reflection session SimpleXML SPL sqlite3 standard tidy tokenizer xml xsl Zend OPcache zip zlib [Zend Modules] Zend OPcache > you confuse un-fiendly with clear and at the point like many people Let's not dwell on this. ;-) I can offer something more related to the problem at hand anyway. Lo and behold: the errors seem to be related to the type of file I want to attach. No matter the OPcache settings, I can successfully attach PDF files, but other file types (i.e. JPG, PNG, TXT) cause the Apache child process deaths. For example, I can attach foo.pdf without problems, but if I rename the file to foo.png, I see crashes. So far I could not find anything related to the file sizes. Could the problem be rooted in the way Roundcube, PHP 5.5 and Apache 2.4 are handling different MIME types? There is no virus checker involved who could choke on different file types, so what could it be? -R

3 3

Sysadmin issue
by Nenhum_de_Nos 12 Jul '15

12 Jul '15

Hail, I use roundcube for a mail server that I use alone, so I chose sqlite as db. The last time I got to make it run, but now this is not true anymore :( I used the initial sqlite command: sqlite3 -init SQL/sqlite.initial.sql config/sqlite_db and then I get write errors for the roundcube install/index.php test: DSN (write): OK DB Schema: OK DB Write: NOT OK([14] unable to open database file (SQL Query: INSERT INTO "session" ("sess_id", "created", "ip", "vars") VALUES ('6ec44d990f8e706a6a7c1b1e344e6f90', datetime('now'), '127.0.0.1', 'foo'))) DB Time: OK I tried to fiddle with the sqlite db file, to the point I got the "initialize db" on the install script. I click on it, and I get also an error. Is sqlite supposed to work ? Am I doing anything wrong ? I looked for sqlite install instructions, but all I get is http://trac.roundcube.net/browser/github/INSTALL?rev=c4a2264ae7a4f333116a55… and I do as said there. I installed sqlite2, no good also. I get DB Schema: NOT OK(Error creating database schema: [26] file is encrypted or is not a database (SQL Query: CREATE TABLE contacts ( contact_id integer NOT NULL PRIMARY KEY, user_id integer NOT NULL, changed datetime NOT NULL default '0000-00-00 00:00:00', del tinyint NOT NULL default '0', name varchar(128) NOT NULL default '', email text NOT NULL default '', firstname varchar(128) NOT NULL default '', surname varchar(128) NOT NULL default '', vcard text NOT NULL default '', words text NOT NULL default '' ))) when I use sqlite version 2 to initialize. I use FreeBSD 10. Is there a guide for it ? thanks, matheus -- "We will call you Cygnus, the God of balance you shall be."

2 2

The excitement continues
by Thomas Bruederli 10 Jul '15

10 Jul '15

Dear subscribers We're just a couple of days away from finishing our Roundcube Next crowd funding and the good news is: we already reached our base goal! That means Roundcube Next will get started and we can refactor the core of Roundcube and get basic email and contacts functionality in place. But that's just the start. If we can push the funding higher, then we can schedule more of the Roundcube Next goals as seen in the graphic on the campaign page. Without that extra support, it will simply take us longer to get there. Visit https://www.indiegogo.com/projects/roundcube-next--2#/story and get involved if you haven't already. Also on the campaign page: some sneak peeks on the visual concepts we've been working on in the past few weeks. The screens are far from being final or complete but you'll the the idea what the new webmail may look like on desktops and mobiles. So there's still time for you to make a difference. Back the campaign today and help us push even further! Best, Thomas and the Roundcube Team

2 1

Attachment Icon missing on some mails
by Joerg Rohrer 08 Jul '15

08 Jul '15

Hi I've just realize that on some mails the icon for attachment (Paper clip) is missing. I don't if it's a roundcube issue or if there is something wrong with the mails. Any hints where i can start identifying what wrong? Thanks Jörg

1 0

Need to open an "email" for refreshing list
by Mirko Galimberti 07 Jul '15

07 Jul '15

Hi All, I'm experiencing a issue with roundcube, when i receive an e-mail,roundcube show the "new message" notification but no new message shown in list. Same issue if I manually refresh e-mails or by pressing F5 on my browser for refreshing the webpage. To show the new message in the list I need to open an old e-mail and then when I go back to the list the new e-mail is shown. -- Distinti saluti Mirko Galimberti

1 0

(no subject)
by Kovács László 01 Jul '15

01 Jul '15

Hi, I'm Ben Kiss!I have already used RoundCube webmail system.My question is, how can I download my mails in one file, or one click.I have found one mode only, but it is bad for me, because it can't download all mails in one file or one click. It can download only one mail in one time. And I have lots of mail.Please help me! Bye!

3 5

connection error (failed to reach the server)
by Bob Miller 23 Jun '15

23 Jun '15

Hello, it was brought to my attention a few months ago that a mac user was seeing the following pop up dialogue box in roundcube with some frequency: connection error (failed to reach the server) At the time, I was chasing a problem with apache where hundreds of connections would open up within a matter of a minute or two, maxing out the allowed connections, and causing roundcube to be unavailable for about 1 minute a few times a day. Didnt' take me long to figure out the IP causing the apache problem was the same user reporting the error pop up. I never did figure out the root of the problem, but I suspected it had to do with the self-signed certs and the CA not being installed on the client's mac. A while later, another mac user started reporting the same error popping up, and I saw the same spike in http connections from this user's IP addresses. Investigated more, got the CA cert installed on this mac, didn't fix the problem, ended up again with no solution. Reloading apache always worked, but it was hard to be on hand whenever the connections spiked, so I wrote a little script that checks the number of connections and reloads apache when it gets over 400 connections. That solved the apache problem (bubblegum, I know), so I called it a mac anomaly put it on the back burner. the error popup didn't actually stop anything from working, just had to click it closed every few minutes, and my customers were amiable to doing just that. Over the last couple of months, I have learned/seen that the same popup happens on ipads and windows computers as well. I just worked on one windows computer where the popup happened in chrome/firefox/IE, with the CA installed so there is no certificate error. Conversely, I use roundcube every where I go on a wide variety of computers, and I do not see this error very often, if ever (can't remember seeing it while logged into my personal account right now). I definitely cannot reproduce it on my ubuntu machine in the office. Best as I can tell on google, the error indicates an http connection failure, but nothing actually fails to work. I can find nothing in the roundcube logs nor the apache logs, which I suppose is expected if the client is failing to connect to the server. The internet connections in my part of the world lack the speed the rest of the world sees; for example and average business/residential connection has a 512Kbps or 768Kbps upload speed, but surely just navigating in roundcube wouldn't flood that? The computer I was just working on is a few years old and a tad underpowered by modern standards, but for a minimal install of windows 7 it isn't sluggish, and cpu/RAM usage don't spike when roundcube is open. And the spike in http connections to the server did not happen, so I am not longer certain if that is related. Does anyone have a suggestion on how I might track the cause of this annoying popup? Or at least cause it to stop popping up all the time? -- Computerisms Bob Miller 867-334-7117 / 867-633-3760 http://computerisms.ca

1 0

Reply to own messages broken...?
by Michael Heydekamp 23 Jun '15

23 Jun '15

Hi, just did set up some mail accounts for a new user and did realize that replies to an own message are being sent to the own address of the original sender rather than to the address of the original recipient. This still works: ----------------- 1) > From: Michael Heydekamp <michael(a)mydomain.de> > Display name: Michael Heydekamp > Email: michael(a)mydomain.de This does not work: ------------------- 2) > From: Michael Heydekamp <michael(a)mydomain.de> > Display name: Michael Heydekamp xxxxxx - xxxxxxx xxx xxxxxxx > Email: michael(a)mydomain.de 3) > From: Michael Heydekamp xxxxxx - xxxxxxx xxx xxxxxxx <michael(a)mydomain.de> > Display name: Michael Heydekamp xxxxxx - xxxxxxx xxx xxxxxxx > Email: michael(a)mydomain.de 4) > From: =?UTF-8?Q?Michael_Heydekamp_xxxxxx_-_xxxxxxx_xxx_xxxxxxx?= > <michael(a)mydomain.de> > Display name: Michael Heydekamp > Email: michael(a)mydomain.de Where "Display name" and "Email" are the relevant entries under Settings/Identities, and "From:" is the From header of the message. According to Example 2) above, Roundcube seems to check for the display name as well...? IMO, it shouldn't do that and check for the address only. Example 3) is strange: Display names are identical, nonetheless the routine fails. Is the display name too long? Example 4): Not sure if folded headers are the problem here. Fix appreciated, as the user in question did already send a few messages to himself, relying on a working Reply-to-own-messages routine (and not realizing the wrong recipient address). Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

3 9

Roundcube Next is coming and we need your help!
by Thomas Bruederli 18 Jun '15

18 Jun '15

Dear subscribers What started with the hypothetical question, "how would we implement Roundcube if we could start over again?" [1], has now grown into a concrete plan how to create the responsive, fast and beautiful successor of Roundcube. It has become clear that the architectural changes necessary for this are way too big to be applied to the current Roundcube codebase without breaking the compatibility in a major way. That's why we're planning to define Roundcube One as feature complete and focus on a new core engine for the future Roundcube webmail application. In order to make than happen, we can reply on long time partners who supported Roundcube already in the past. Kolab Systems has offered to drive this project by contributing their well established software development capabilities and dedicate additional developer power to help us get the work done. In addition to that, the folks from Kolab Digital in London are going to share their expertise on the UX and design part of it. Two major goals are important to us: Besides improving the core technology and modernizing the UI, we also aim to move some of the groupware features we currently see in the Kolab suite into Roundcube itself and make them available for other backends. And we'll certainly provide a migration path to existing Roundcube installations. So to enable us to achieve these high stake goals together for Roundcube Next we proudly announce our crowdfunding campaign at Indiegogo. Go to https://roundcu.be/next and back us if you can or help us spread the word about it. Your websites, blogs and social media channels can help us reach more people. Or if you're working for, or are a customer of, an ISP who's already using Roundcube, please forward this campaign to your product manager. Let's challenge today's email and create the most awesome webmail application people deserve to communicate freely using systems and services they can trust. The next Roundcube will of course again be 100% open source and made available to everybody. This is your chance to contribute to the success of free software. Many thanks to all of our past, current and future supporters! Sincerely, The Roundcube Dev Team [1] https://roundcubeinbox.wordpress.com/2014/09/12/roundcube-next-if-we-would-…

2 1

Text signature vs. HTML signature
by Michael Heydekamp 18 Jun '15

18 Jun '15

Hi there, although I do really hate HTML messages (and their multipart/alternative incarnations, as they're most often misformatted), there's sometimes no way around it to use them. Especially if you're starting an own business and need to compose messages with HTML signatures, including a logo and this kind of stuff. So I expected Roundcube to be able to create a) a signature in plain text format for text messages, and b) an alternative signature in HTML format for HTML messages - for the same account, of course. Therefore, today I played the very first time with the toggle "HTML signature". But I really don't get what this option does (or should do). Let's say I have this plain text signature ("HTML signature" de-selected): -------------------------------- > -- > Michael Xxxxxxxxx > Tel.: +49-(0)211-xxxxxxx > Mobil: +49-(0)172-xxxxxxx > eMail: michael(a)xxxxxxxxx.de > WWW: http://www.xxxxxxxxx.de -------------------------------- If I now select the toggle "HTML signature" and de-select it again, the following plain text signature is being returned: ---------------------------------- > -- > Michael Xxxxxxxxx > Tel.: +49-(0)211-xxxxxxx > Mobil: +49-(0)172-xxxxxxx > eMail: michael(a)xxxxxxxxx.de > WWW: http://www.xxxxxxxxx.de [1] > > Links: > ------ > [1] http://www.xxxxxxxxx.de ---------------------------------- Not only that there is an IMO senseless additional link being created, also the blanks after "Tel." etc. are gone, so the contacts are not properly left-aligned anymore. If I do the same again, the following plain text signature is being returned: ------------------------------------------ > -- > Michael Xxxxxxxxx > Tel.: +49-(0)211-xxxxxxx > Mobil: +49-(0)172-xxxxxxx > eMail: michael(a)xxxxxxxxx.de > WWW: http://www.xxxxxxxxx.de [1] [1 [1]] > Links: > ------ > [1] http://www.xxxxxxxxx.de [1] > > Links: > ------ > [1] http://www.xxxxxxxxx.de ------------------------------------------ Even more senseless links! And so on... As I said, I don't get it. What's that for...? Can somebody explain? The creation of the body of HTML messages seems to even worse, but that's a different issue for a different thread then. Any help appreciated. Cheers, -- Michael Heydekamp Co-Admin freexp.de Düsseldorf/Germany

2 5

Issue with mime types
by absolutely_free＠libero.it 12 Jun '15

12 Jun '15

Hi, everytime I upgrade RC, I get this warning: WARNING: Mimetype to file extension mapping doesn't work properly! Please check the 'mime_types' config option and run this script again. My environment is: # lsb_release -a LSB Version: :base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch Distributor ID: CentOS Description: CentOS release 6.6 (Final) Release: 6.6 Codename: Final # php -v PHP 5.3.3 (cli) (built: Oct 30 2014 20:12:53) Copyright (c) 1997-2010 The PHP Group Zend Engine v2.3.0, Copyright (c) 1998-2010 Zend Technologies backend: MySQL web server: nginx nginx.conf: user nginx; worker_processes 2; error_log /var/log/nginx/error.log warn; pid /var/run/nginx.pid; events { worker_connections 1024; } http { include /etc/nginx/mime.types; <--------------- The file is present on filesystem. Thank you

1 0

Updates 1.1.2 and 1.0.6 released
by Thomas Bruederli 06 Jun '15

06 Jun '15

Dear Roundcube users We just published updates to both stable versions 1.0 and 1.1 after fixing many minor bugs and adding some security improvements to the 1.1 release branch. Version 1.0.6 comes with cherry-picked fixes from the more recent version to ensure proper long term support especially in regards of security and compatibility. The security-related fixes in particular are: - XSS vulnerability in _mbox argument - security improvement in contact photo handling - potential info disclosure from temp directory See the full changelog here: http://trac.roundcube.net/wiki/Changelog Both versions are considered stable and we recommend to update all productive installations of Roundcube with either of these versions. Download them from https://roundcube.net/download As usual, don't forget to backup your data before updating. And there's one more thing: Our crowdfunding campaign for Roundcube Next is still ongoing and has just been updated with more details of what we want to achieve. We'd much appreciate your support for this exciting new project. Please visit https://roundcu.be/next and spread the word about it.

1 0

Server Error: Unable to send command: A0009 UID EXPUNGE 18748
by Josep BSC 04 Jun '15

04 Jun '15

Hi all, I am posting here because when upgrading from RC 0.5.4 to RC 1.1.1 I am getting this error when I try to delete a message from Inbox folder, the rest works fine. Server Error: Unable to send command: A0009 UID EXPUNGE 18748 Even though the message is deleted from the mailbox, but it is quite annoying to have it there. It just weird that it happens only to the INBOX folder. With the previous version it worked fine, no error message was displayed. Dovecot : 1.2.3 Thanks a lot! -- Josep Manel Andrés (josep.andres(a)bsc.es) Operations - Barcelona Supercomputing Centre C/ Jordi Girona, 31 http://www.bsc.es 08034 Barcelona, Spain Tel: +34-93-405 42 14 e-mail: systems(a)bsc.es Fax: +34-93-413 77 21 ----------------------------------------------- WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

2 3

Re: [RCU] Server Error: Unable to send command: A0009 UID EXPUNGE 18748
by Josep BSC 03 Jun '15

03 Jun '15

Hi Harald, I totally agree with you. But since this is only a barely used server and only accessible from within the company's facilities..... So, I assume that it is related with the Dovecot server, isn't it? Best regards. Josep On 03/06/15 14:53, Reindl Harald wrote: > > Am 03.06.2015 um 14:49 schrieb Josep BSC: >> Dovecot : 1.2.3 > > dovecot 1.x is EOL for years now > > what's the purpose of moving to the newest and greatest RC and don't > care about a likely insecure and buggy backend mailserver? > ----------------------------------------------- WARNING / LEGAL TEXT: This message is intended only for the use of the individual or entity to which it is addressed and may contain information which is privileged, confidential, proprietary, or exempt from disclosure under applicable law. If you are not the intended recipient or the person responsible for delivering the message to the intended recipient, you are strictly prohibited from disclosing, distributing, copying, or in any way using this message. If you have received this communication in error, please notify the sender and destroy and delete any copies you may have received. http://www.bsc.es/disclaimer

1 0

External AD/LDAP server address book
by Diogo Vieira 25 May '15

25 May '15

Hello, I'm trying to add an address book from an external LDAP server for one of our clients in our shared roundcube installation. From what I could tell roundcube supports this[0] but I would like to know if I can filter that address book only to appear to clients in a specific domain. Is this possible natively? In case it isn't, would it be necessary/possible to create a plugin for roundcube? [0]: at least it seems so as per the "Configuring Roundcube" section of http://trac.roundcube.net/wiki/Howto_Config/Ldap Thank you very much for your attention, -- Diogo Vieira <dfv(a)eurotux.com> Programador Eurotux Informática, S.A. | www.eurotux.com

1 0

Server Settings prefs
by list＠airstreamcomm.net 19 May '15

19 May '15

Running Roundcube 1.0.4 and we didn’t notice this for a very long time but the “Server Settings” preferences section is not visible on our install. We looked on line but could not find anything, is there some configuration option to expose this to users?

1 0

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:37, Reindl Harald wrote: > > read the wiki article > > CSRF is not about "verify authentication state", it is about a link > from the attacker leads in trigger a action in a web-application > *because you are authenticated* and hence there is a CRSF-token I wasn't sufficiently clear, I don't intend to scrape the data and embed it into another application. I plan to have the application redirect to RC itself, in the browser. The other application will never have access to the results of that page and it will not redirect back. Again, no different than you clicking on this link: http://www.amazon.com/s/?tag=duc0c-20&url=search-alias%3Daps&field-keywords… Your mail client will have no access to your Amazon account, but the search request will still be executed.

3 2

Re: [RCU] Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

On 2015-05-12 09:15, Reindl Harald wrote: > if that would work it would deserve a bugreport and a CVE because you > would bypass the > http://en.wikipedia.org/wiki/Cross-site_request_forgery protection I don't see why that would be the case. It's similar to entering https://www.google.com/?q=query+string into your browser's address bar. This wouldn't require any loss of security as RC can already verify authentication state before processing a request. For example, if you request this URL before logging in, you'll get a login page rather than the actual mailbox: https://roundcube/?_task=mail&_mbox=Archive is requested the same as if you were to request https://roundcube/?_task=mail&_mbox=Not%20Real It may not be possible with RC, but that's what I want to understand.

1 0

Search Via HTTP GET
by Andrew Davidson 12 May '15

12 May '15

I'm trying to develop an interface to roundcube and would like to pass it a search query for a specific folder. Does anyone know a proper way to do this over a HTTP GET request? I've tried these queries after viewing the headers during the AJAX search query (*string* is the URL encoded search query): https://roundcube/?_task=mail&_mbox=Archive&_action=search&_q=*string* https://roundcube/?_task=mail&_filter=ALL&_q=*string*&_mbox=Archive&_remote… Neither proved successful. Any throughts?

1 0

Signature positioning configuration
by Tristan Muzard 09 May '15

09 May '15

--- Original Language (French) --- Bonjour, Depuis hier les signatures ne se positionne plus à la suite en bas de message mais en lien avec la réponse, hors pour plein de raison nous somme nombreux à ne pas vouloir que les signatures soit en bas et les réponses au dessus des messages. Hors cette configuration n'est pas personnalisable. Je reste à votre dispo pour plus d'info. Cordialement. --- Auto-Translate : --- Hello, Since yesterday the signatures is positioned more as a result at the bottom of the message, but in connection with the answer, except for a lot of money because many of us do not want that signatures is down and the responses to the above messages. Excluding this configuration is not customizable. I remain at your avail for more info. Sincerely. -- Tristan

2 2

problem withSENDER and reply-to EMAILS.
by Rad Koi 07 May '15

07 May '15

Please, can anybody help me configure my email identity settings? My friend can receive emails to his webmail identy without filling in his REPLY-TO. For me I've tried asking him but he is selfish and would not like to tecah me. How do I receive messages to my webmail id if my SENDER EMAIL is added and no REPLY-TO?Thanks.

2 1

Join us at the Kolab Summit in The Hague
by Thomas Bruederli 01 May '15

01 May '15

Dear Roundcube users and affiliates The Roundcube development team gathers this weekend in The Hague at the first Kolab Summit. If you can make it there, we'd love to meet you in person and talk to you about the future of Roundcube. More information about the event and the location can be found here: https://conference.kolab.org Kind regards, Thomas

1 0

is it possible to disable use_secure_urls for some pages?
by martijn.list 30 Apr '15

30 Apr '15

Hi, Enabling use_secure_urls has some side effects which I'm looking at how to solve. For example, a user might have defined a bookmark to the RC login page (www.example.com/webmail/). This works find just as long as the user is not yet logged in. However if the user is already logged in and the user wants to check whether there is any new mail and therefore clicks the bookmark, an error page with "Access to this service was denied due to failing security checks!" is shown. The user should then click the "click here to try again" link which will redo the request but now with the correct token in the URL. Since the GET request is redone but now with the correct token added, to me it looks like checking the URL token for GET requests will not bring additional security because if the user clicks the "click here to try again" link, the request will be done anyway. Is it possible to disable the secure URL check for certain pages and/or requests? Perhaps with a plugin? or is it all or nothing? Kind regards, Martijn Brinkers

2 3

- Comparing roundcube vs OpenWebMail
by webmaster 29 Apr '15

29 Apr '15

I am examining the features and benefits of roundbox webmail. Since I have 7 years of mailboxes using OpenWebMail, another webmail, I have to take the decision if it is worth to migrate to roundcube now that I am contracting a different VPS with 1&1. First, if all my Sendmail mailserver OpenWebMail mailboxes contents Inbox, Sentmail, etc, can be read by roundcube or not. Second, compare the features of each one. OpenWebMail has tons of features, webdisk, multilanguage, customization, etc. and so does roundcube, so is there someone who knows OpenWebMail and can assist in comparing both? Much obliged !

2 1

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users