- Users - Roundcube mailing lists

Re: log file date format
by Jim Pazarena 24 Jul '24

24 Jul '24

On 2024-07-24 9:38 AM, list--- via Users wrote: >> I have updated to 1.6.7 and my log files are now being generated in >> UTC rather than my preferred PST/PDT. I do not use syslog for rcube. >> >> I have adjusted my config.inc.php: >> $config['log_date_format'] = 'Y-m-d H:i:s'; >> which is how my previous version of rcube was set. >> but the logs are now 7 hours advanced (UTC). > > > Check your PHP settings. > > /etc/php.ini > date.timezone = America/Los_Angeles > > There is also a timezone setting in roundcube, but i think this is what > gets displayed to the end user and doesn't affect the time zone used on > the server. > > ./config/defaults.inc.php > // use this timezone to display date/time > // valid timezone identifiers are listed here: > php.net/manual/en/timezones.php > // 'auto' will use the browser's timezone settings > $config['timezone'] = 'auto'; yipes. I had also updated php, and my original php.ini file got blasted away. roundcube log files now have the correct date/timezone after I added the date.timezone setting to php.ini. Thank you much ! -- Jim Pazarena roundcube(a)paz.bz Haida Gwaii - British Columbia - Canada

1 0

log file date format
by Jim Pazarena 24 Jul '24

24 Jul '24

I have updated to 1.6.7 and my log files are now being generated in UTC rather than my preferred PST/PDT. I do not use syslog for rcube. php 8.3.8 http 2.4.62 I have adjusted my config.inc.php: $config['log_date_format'] = 'Y-m-d H:i:s'; which is how my previous version of rcube was set. but the logs are now 7 hours advanced (UTC). suggestions appreciated. -- Jim Pazarena roundcube(a)paz.bz Haida Gwaii - British Columbia - Canada

2 1

Connection failed - failed to reach server
by Stephan Fourie 23 Jul '24

23 Jul '24

Hi everyone, Sitting with an issue and hoping someone has some advice. We have a user where normal email sending works. But, when an email is sent to a large group and they click send, the circle button appears and after around 4 - 5 minutes the error 'connection error [failed to reach server]' is presented. On the email server that's hosting the email account, Exim reports the following error 11 minutes later after the web server (Apache / fpm) timeouts, which are set to 600 seconds, on the Roundcube server are reached: -------------------------------------------------------------------------------------- 2024-07-23 10:18:04 unexpected disconnection while reading SMTP command from redacted-hostname (redacted-hostname) [Redacted-IP-address] D=11m29s -------------------------------------------------------------------------------------- Apache error log: -------------------------------------------------------------------------------------- [Tue Jul 23 10:16:34.366746 2024] [proxy_fcgi:error] [pid 1170321:tid 1170362] (70007)The timeout specified has expired: [client REDACTED] AH01075: Error dispatching request to : (polling), referer: https://REDACTED/?_task=mail&_action=compose&_id=4318354025669f63d117867 -------------------------------------------------------------------------------------- All web server / PHP related timeouts are set to above 300 seconds. All settings in the Roundcube configuration related to timeouts look okay. Any advice on what more can be checked will be appreciated. Thanks! Stephan

2 1

smtp servers
by mick.crane 22 Jul '24

22 Jul '24

can I set different smtp servers for different email addresses? mick

6 8

Multiple domains config
by timothy 22 Jul '24

22 Jul '24

Hello gurus, I use the latest version of roundcube as my webmail, and I want to allow webmail access to free.fr and gmx.it (I have accounts with these two email providers).So set the following in rc's configuration file. $config['imap_host'] = array('ssl://imap.gmx.com:993','ssl://imap.free.fr:993'); $config['smtp_host'] = array('imap.gmx.com' => 'ssl://mail.gmx.com:465', 'imap.free.fr' => 'ssl://smtp.free.fr:465' ); $config['mail_domain'] = array( 'imap.gmx.com' => 'gmx.it', 'imap.free.fr' => 'free.fr' ); When I open webmail, it always displays a dropdown menu for me to select an IMAP host. This is so frustrating. How to disable this drop-down menu and automatically match email addresses to imap hosts? Thanks.

2 1

core plugins and licenses
by Benny Pedersen 13 Jul '24

13 Jul '24

archive 3.5 GPL-3.0+ emoticons 3.0 GPL-3.0+ filesystem_attachments 1.0 GPL-3.0+ identicon 0.1 GPL-3.0+ identity_select 1.1 GPL-3.0+ jqueryui 1.13.2 GPL-3.0+ listcommands GPL-2.0 Download managesieve 9.4 GPL-3.0+ password 5.3 GPL-3.0+ show_additional_headers 2.0 GPL-3.0+ userinfo 1.2 GPL-3.0+ is it possible to see listcommands as core plugin ?, imho just a license change needed ? https://github.com/corbosman/listcommands

1 0

Debian MySQL Schema Update
by Dave Hall 14 Jun '24

14 Jun '24

Hello, I'm looking for a CLI command to update the MySQL schema for RoundCube. Is there an easy way to do this? I am also working to enable the installer URL, but in the course of integrating RoundCube with the rest of my Apache config I have blocked this even when enable_installer is set to true in defaults.inc.php. Back story: I have just moved my servers from Debian 11 to Debian 12, which implies moving from RoundCube 1.4.15 to 1.6.5. Since I am running multiple servers, I deferred on the database schema update until the last one, But I did the last one in a hurry and still managed to inadvertently deferre the database update. Now I have 4 servers running 1.6.5, but my schema is still for 1.4.15. Fortunately RoundCube is still working with the old schema - I know that's not guaranteed. Thank you in advance for any assistance you can provide. -Dave -- Dave Hall Binghamton University kdhall(a)binghamton.edu

1 0

Security updates 1.5.7 and 1.6.7 released
by Aleksander Machniak 12 Jun '24

12 Jun '24

We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail. They both contain fixes for recently reported security vulnerabilities. - Fix cross-site scripting (XSS) vulnerability in handling SVG animate attributes. Credits for this finding to Valentin T. and Lutz Wolf of CrowdStrike. - Fix cross-site scripting (XSS) vulnerability in handling list columns from user preferences. Credits for this finding to Huy Nguyễn Phạm Nhật. - Fix command injection via crafted im_convert_path/im_identify_path on Windows. Credits for this finding to Huy Nguyễn Phạm Nhật. See the full changelogs in the release notes on the Github download pages for the updated versions 1.6.7 and 1.5.7. https://github.com/roundcube/roundcubemail/releases/tag/1.6.7 https://github.com/roundcube/roundcubemail/releases/tag/1.5.7 We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.5.x with this new versions. -- Alec

7 7

If you aren't a current list member, sending this message will subscribe you.
by 4jfsy6hg＠nqmo.com 07 Jun '24

07 Jun '24

https://www.aussietopescorts.com If you aren't a current list member, sending this message will subscribe you.

1 0

version compatibility between roundcube and php
by Jim Pazarena 01 Jun '24

01 Jun '24

I am running an old version of roundcube ( 1.2.3 ) on an old OS with php 5.6.29 If I install the latest 1.6.7 with the appropriate mysql database updates, I am curious if the 1.6.7 will find the old php 5.6.29 workable, or if there will be a hard stop because of an incompatibility.

2 1

[RCU]best practice for roundcube + 2fa
by Marc 14 May '24

14 May '24

Is there a best practice for enabling 2fa with roundcube?

2 2

[RCU]example how to add form fields to a template
by Marc 13 May '24

13 May '24

Can anyone help me with an example of how to add form fields to an existing template loaded from /skins/

1 0

[RCU]Interface Layout
by marcio＠nova-acropole.org.br 03 May '24

03 May '24

Hello, In previous versions, in Roundcube you could change the layout. I didn't find this option in the User Interface. Does anyone know how I can make this feature available to customers again? Thanks, Márcio

3 2

[RCU]Welcome back!
by Jos Poortvliet 04 Mar '24

04 Mar '24

Dear Roundcube community! You might not have seen any emails on these lists for a while, but we're back! For those not keeping a very close eye on Roundcube developments and note my @nextcloud.com email address: 👋 Hi there! Late last year, Roundcube found a new home with the Nextcloud community. You can read all about it here: <https://nextcloud.com/blog/open-source-email-pioneer-roundcube-comes-aboard…> If you have questions, I'll do my best to answer them, you can ask on the list but you can also engage on our forum: <https://help.nextcloud.com/c/roundcube/188> We are still looking for prospective Roundcube developers to join Nextcloud, so if you're looking for a position, check out: <https://nextcloud.com/jobs> and send us your resume. In the coming months, some developers will join us and take up Roundcube improvements. Once they are on-board, we will share more information here. Until then, the three mailing lists are back up and open for business: ## Announce https://lists.roundcube.net/postorius/lists/announce.lists.roundcube.net/ Read-only list with announcements of new versions, security bugs and more. ## Dev https://lists.roundcube.net/postorius/lists/dev.lists.roundcube.net/ All topics related to the development of Roundcube Webmail. ## Users https://lists.roundcube.net/postorius/lists/users.lists.roundcube.net/ All topics related to the use and administration of Roundcube Webmail. Users help each other here so please be kind! I wish you all the very best of times and let's make 2024 a great year for Roundcube - and Nextcloud! Greetings, Jos Poortvliet Director Communications oOo Nextcloud - regain control over your data jos.poortvliet(a)nextcloud.com nextcloud.com +49 171 121 7528 Nextcloud GmbH Hauptmannsreute 44A, 70192 Stuttgart Germany GF: Frank Karlitschek HRB 227086 (AG München)

2 1

permanent draft?
by Marchello 27 Nov '19

27 Nov '19

Hi all, My need is to create permanent draft so that it doesn't disappear after I use it to send email. In other words, I'd like to re-use the same draft. Is it possible at all? Please advise. Best, Marchello

2 2

Disable skins selectively
by Dan 27 Nov '19

27 Nov '19

Hello, I am aware of disabling skin selection by adding the 'dont_override' option to the config.inc.php file. However, Is there a way to disable only one skin, without removing the folder from skins/ ? I would like to disable classic, But not manually remove the folder. Thank you.

1 0

Roundcube version
by ＠lbutlr 27 Nov '19

27 Nov '19

Is there anywhere in the webUI that the version of Roundcube installed is shown? -- you cannot code around infinite implementations of OCD -John C Welch

3 2

favicon
by Jorge Bastos 26 Nov '19

26 Nov '19

Howdy, Since 1.4 i believe, i'm seeing the logo image that i have set, beeing set as the favicon aswell, not sure if this was the behavior before 1.4. Can't i have the logo set, and use another favicon.ico in the server root? Putting a "favicon.ico" in the root, i always have the logo defines as the favicon, How could i set this differently? Thanks,

1 0

Update 1.4.1 released
by Thomas Bruederli 25 Nov '19

25 Nov '19

Dear subscribers Short time after the release of the stable version 1.4.0 of Roundcube Webmail we already publish the first service release. With the recent release we missed to mention a few breaking changes since the last stable version 1.3. We apologize for this and are now clarifying and correcting these: Breaking changes ---------------- (since 1.3.x) * new defaults for smtp_* config options: Upon many requests and in order to get closer to the default setup of most SMTP servers, we changed the defaults as follows: // SMTP port (default is 587) $config[‘smtp_port’] = 587; // SMTP username (if required). %u will use the current username for login $config[‘smtp_user’] = ‘%u’; // SMTP password (if required). %p will use the current user’s password for login $config[‘smtp_pass’] = ‘%p’; * changed default password_charset to UTF-8: Because of many complaints, we decided to choose a more sane default that covers most setups and configurations. * login page returning 401 Unauthorized status: The new behavior that Roundcube 1.4 returns a 401 status code if the client is not authenticated apparently was very unexpected and lead to monitoring problems. Despite not having mentioned that change in the release notes, we now partly reverted it so that 401 is only returned on login failures but not on the first request to Roundcube which by definition is unauthorized. Besides these three major concerns we heard from your much appreciated feedback, we fixed a number of nasty bugs that sneaked into the 1.4.0 release. See the full changelog in the release notes on the Github download page [1]. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from roundcube.net [2]. Please do backup your data before updating. We'd also like to thank Phil for his steady efforts to keep our website up-to-date. Your work is much appreciated! Best, Thomas & Alec [1] https://github.com/roundcube/roundcubemail/releases/tag/1.4.1 [2] https://roundcube.net/download

5 6

Strange sieve script
by Jorge Bastos 24 Nov '19

24 Nov '19

Howdy, I've seen some some time and in distinct users, a redirect script been added to an email that has nothing to do with them. Maybe it's for fishing or other intention, maybe even espionage, which is real nowadays. Did anyone saw this in your users? I catched this in a regular "mailq" investigation for problems

2 2

How to use the GnuPG keyring in Mailvelope?
by Frederick Zhang 19 Nov '19

19 Nov '19

Hi all, First of all, sorry if you've seen this mail before. I posted it last week but it didn't show up in the archives so this is actually a repost. I've just upgraded to Roundcube v1.4.0 and it's great to see Mailvelope integration. However, it seems that Roundcube automatically creates a new keyring using the domain name in Mailvelope instead of picking up the preferred one. This is a problem for me as I'm using YubiKey and my private keys are only available in the preferred GnuPG keyring through gpgme so now Roundcube keeps telling me that 'This sender identity doesn't yet have a PGP private key stored in your Mailvelope extension.' May I know whether it's possible to configure Roundcube to use the preferred keyring in Mailvelope? Thanks a lot. -- Best Regards, Frederick Zhang Email: frederick888(a)tsundere.moe

1 0

Roundcube Webmail 1.4.0 - Elastic released
by Thomas Bruederli 18 Nov '19

18 Nov '19

Dear subscribers It's a big honor for me to announce the final release of the long awaited major version 1.4 of Roundcube webmail. After more than two years of hard work by Alec and other volunteer contributors, Roundcube finally gets the responsive skin with full mobile device support - the Elastic. In addition to the new UI we introduce these new features: * Email Resent (Bounce) feature * Improved [Mailvelope](https://www.mailvelope.com) integration * Support for Redis and Memcached cache * Support for SMTPUTF8 and GSSAPI Plus numerous improvements and bug fixes collected from your precious feedback as well as updates to recent versions of 3rd party libraries like jQuery and TinyMCE. See the full changelog in the release notes on the Github download page [1]. The new Elastic theme, which is the new default skin, is built with LESS and of course the sources are included. They allow a certain degree of customization by adjusting some colors and variables using the `_styles.less` and `_variables.less` files. Please consider customizing your Roundcube installation in order to make phishing [2] harder. You'll find guidance in the README.md file inside the skin folder. This release is considered stable and we encourage you to update your productive installations after carefully testing the upgrade scenario and preparing your users to the significant changes in their webmail UI. Download it from https://roundcube.net/download. With the release of Roundcube 1.4.0, the previous stable release branches 1.3.x and 1.2.x will change into LTS low maintenance mode which means they will only receive important security updates but no longer any regular improvement updates. The 1.1.x series is no longer supported and maintained. Kind regards, Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.4.0 [2] https://roundcube.net/news/2019/10/28/phishing-alert

7 8

Remove example contacts
by Marchello 14 Nov '19

14 Nov '19

Hi all, How do I remove example contacts after they were created? No buttons available to remove them from the web interface. Please advise. Best, Marchello

2 1

filter by header
by Marchello 14 Nov '19

14 Nov '19

Hi all, How do I create filter by header? I installed filters plugin and I can see $config['spam_headers'] = array('X-Spam-Flag','X-Spam-Status','X-Yandex-Spam'); line in my configuration file /var/www/html/example.com/roundcube/plugins/filters/config.inc.php I don't have any of these headers like X-Spam-Flag, X-Spam-Status, X-Yandex-Spam. But I have Delivered-To header that shows my username1(a)gmail.com So I tried to add ,'Delivered-To' into config line, then created filter If the field [Delivered-To] contains gmail move the message to Inbox.gmail from Inbox (Messages: All, Mark: As read) But it didn't work for me. The problem is that some smart spammers do not include my email address into To: or Cc: field, so I can't filter it (those that include it go to needed folder indeed). Please advise. Best, Marchello

2 2

Error loading 1.4 - Error 604.
by Jari Fredriksson 14 Nov '19

14 Nov '19

Just installed 1.4.0 over last 1.3 using bin/installto.sh The login page loads and the webmail page after that but it says SERVICE CURRENTLY NOT AVAILABLE! Error No. [604] I see no related errors in apache2 logs. What to do?

1 1

Roundcube Settings
by itml＠ma3ki.net 13 Nov '19

13 Nov '19

Hello, I use Elastic Skin of Roundcube Webmail 1.4.0. When I click the 'Actions Filter name' in the 'Filters' , I can not click except 'Save' button. Is this a specification ?

1 0

Release signatures incorrect?
by Martijn Brinkers 11 Nov '19

11 Nov '19

Hi, I downloaded the latest RC release from the provided link https://github.com/roundcube/roundcubemail/releases/download/1.4.0/roundcub… I then downloaded the signature https://github.com/roundcube/roundcubemail/releases/download/1.4.0/roundcub… When I try to validate the signature gpg tells me: gpg --verify roundcubemail-1.4.0.tar.gz.asc gpg: assuming signed data in 'roundcubemail-1.4.0.tar.gz' gpg: Signature made za 09 nov 2019 21:30:45 CET gpg: using RSA key 8970E37A698AF775D87D590DC2946A9609CD56B4 gpg: issuer "devs(a)roundcube.net" This shows that the signer has the key id: 8970E37A698AF775D87D590DC2946A9609CD56B4 However according to the website the (short) key ID should be: 41C4F7D5 The download link for the signing key (https://roundcube.net/download/pubkey.asc) matches the above short key id: F3E4C04BB3DB5D4215C45F7F5AB2BAA141C4F7D5 So either the packages have been signed with a different roundcube devs key or the packages have been modified (or I'm doing something stupid :) Any idea? Kind regards, Martijn Brinkers

1 1

getting 500 - internal server error after creating filter
by Marchello 06 Nov '19

06 Nov '19

Hi all, [sorry, forgot to include attachments in my previous message, fixed now] I'm trying to use roundcube and it is critical for me to have filtering rules. I am using squirrelmail and it has filters, but the UI is not mobile-friendly. Roundcube has mobile-friendly themes, so I would like to use it. But when I installed filters and created one test filter, it started to show 500 - internal server error. When I delete filter, it works fine again. I will put all needed technical details here. Roundcube Webmail 1.1.4 additional_message_headers 1.2.0 GPLv2 archive 2.3 GPLv3+ Attachment Reminder 1.1 GPLv3+ filesystem_attachments 1.0 GPLv3+ filters 2.1.4 GNU GPLv3+ hide_block 1.0 GPLv3+ identity_select 1.0 GPLv3+ jqueryui 1.10.4 GPLv3+ markasjunk 1.2 GPLv3+ mobile 0.4.5 GPL-3.0+ newmail_notifier 0.7 GPLv3+ new_user_dialog 2.1 GPLv3+ new_user_identity 1.1 GPLv3+ show_additional_headers 2.0 GPLv3+ squirrelmail_usercopy 1.4 GPLv3+ userinfo 1.0 GPLv3+ vcard_attachments 3.2 GPLv3+ zipdownload 3.0 GPLv3+ $ apache2 -v Server version: Apache/2.4.7 (Ubuntu) Server built: Apr 3 2019 18:04:25 $ php -v PHP 5.5.9-1ubuntu4.29 (cli) (built: Apr 22 2019 18:33:52) Copyright (c) 1997-2014 The PHP Group Zend Engine v2.5.0, Copyright (c) 1998-2014 Zend Technologies with Zend OPcache v7.0.3, Copyright (c) 1999-2014, by Zend Technologies $ mysql -V mysql Ver 14.14 Distrib 5.5.62, for debian-linux-gnu (x86_64) using readline 6.3 attachments: error screenshot (it doesn't want to display my inbox messages after filter is created) filter example (very simple as for me) Please let me know what else do you need to advise. Asked also on https://www.roundcubeforum.net/index.php/topic,28592.0.html previously, but no answer so far. Best, Marchello

3 4

question about using Round Cube webmail
by billk＠bluestradatours.com 31 Oct '19

31 Oct '19

I have been using this program for 9 years... mostly putting up with it. Today, I really needed to move some folders from one 'parent' folder to another. I could not figure out how to do that. Any input is greatly appreciated. Bill Kniegge

2 2

getting 500 - internal server error after creating filter
by Marchello 31 Oct '19

31 Oct '19

Hi all, I'm trying to use roundcube and it is critical for me to have filtering rules. I am using squirrelmail and it has filters, but the UI is not mobile-friendly. Roundcube has mobile-friendly themes, so I would like to use it. But when I installed filters and created one test filter, it started to show 500 - internal server error. When I delete filter, it works fine again. I will put all needed technical details here. Roundcube Webmail 1.1.4 additional_message_headers 1.2.0 GPLv2 archive 2.3 GPLv3+ Attachment Reminder 1.1 GPLv3+ filesystem_attachments 1.0 GPLv3+ filters 2.1.4 GNU GPLv3+ hide_block 1.0 GPLv3+ identity_select 1.0 GPLv3+ jqueryui 1.10.4 GPLv3+ markasjunk 1.2 GPLv3+ mobile 0.4.5 GPL-3.0+ newmail_notifier 0.7 GPLv3+ new_user_dialog 2.1 GPLv3+ new_user_identity 1.1 GPLv3+ show_additional_headers 2.0 GPLv3+ squirrelmail_usercopy 1.4 GPLv3+ userinfo 1.0 GPLv3+ vcard_attachments 3.2 GPLv3+ zipdownload 3.0 GPLv3+ $ apache2 -v Server version: Apache/2.4.7 (Ubuntu) Server built: Apr 3 2019 18:04:25 $ php -v PHP 5.5.9-1ubuntu4.29 (cli) (built: Apr 22 2019 18:33:52) Copyright (c) 1997-2014 The PHP Group Zend Engine v2.5.0, Copyright (c) 1998-2014 Zend Technologies with Zend OPcache v7.0.3, Copyright (c) 1999-2014, by Zend Technologies $ mysql -V mysql Ver 14.14 Distrib 5.5.62, for debian-linux-gnu (x86_64) using readline 6.3 attachments: error screenshot (it doesn't want to display my inbox messages after filter is created) filter example (very simple as for me) Please let me know what else do you need to advise. Asked also on https://www.roundcubeforum.net/index.php/topic,28592.0.html previously, but no answer so far. Best, Marchello.

1 0

Re: [RCU] Content Security Policy for Roundcube
by James Brown 31 Oct '19

31 Oct '19

Finally got this to work. In http.conf I put: <Directory “/parth/to/roundcube"> AllowOverride All Options +Indexes </Directory> Then created /path/to/roundcube/.htaccess and it has: Header unset Content-Security-Policy Header always set Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self'; frame-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'" Not sure if the first line with the ‘unset’ is needed. After restarting Apache it works. Hope that helps someone else. James. > On 11 Oct 2019, at 4:55 pm, James Brown <jlbrown(a)bordo.com.au> wrote: > > Good suggestion. > > Unfortunately it still doesn’t work. > > In http.conf I put: > > <Directory “path/to/sites/roundcube” > AllowOverride All > </Directory> > > But I would always get “.../roundcube/.htaccess: Header not allowed here” > > So commented everything out of roundcube/.htaccess and in http.conf I put: > > <Directory "path/to/sites/roundcube"> > AllowOverride All > #Header unset Content-Security-Policy > Header always set Content-Security-Policy "default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline' 'self'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content" > </Directory> > > But still get: > > [Error] Refused to execute a script because its hash, its nonce, or 'unsafe-inline' appears in neither the script-src directive nor the default-src directive of the Content Security Policy. (roundcube, line 17) > [Error] Refused to execute a script because its hash, its nonce, or 'unsafe-inline' appears in neither the script-src directive nor the default-src directive of the Content Security Policy. (roundcube, line 57) > > Maddening! > > James. > >> On 11 Oct 2019, at 12:02 am, @lbutlr <kremels(a)kreme.com> wrote: >> >> On Oct 9, 2019, at 11:46 PM, James Brown <jlbrown(a)bordo.com.au> wrote: >>> I think you could be right Thomas, as whatever I put into the .htaccess file doesn’t seem to make a difference. >> >> Sounds like your .htaccess file is not being processed then. >> >> What is the AllowOverride directive in your http.conf for the roundcube directory or parent directory. >> >> For example, my roundcube install is in /usr/local/www/roundcube and in http.conf I have >> >> <Directory "/usr/local/www”> >> . . . stuff >> AllowOverride All >> . . . stuff >> </Directory> >> >> >> >> -- >> The thing standing in the way of your dreams is that the person having them is >> *you* https://xkcd.com/1027/ >> >> _______________________________________________ >> Roundcube Users mailing list >> users(a)lists.roundcube.net >> http://lists.roundcube.net/mailman/listinfo/users > > > _______________________________________________ > Roundcube Users mailing list > users(a)lists.roundcube.net > http://lists.roundcube.net/mailman/listinfo/users

1 0

Content Security Policy for Roundcube
by James Brown 11 Oct '19

11 Oct '19

Turning on 'Show Javascript Console' from Safari Develop menu showed me that my Content Security Policy was preventing emails displaying in mailboxes. Additionally at logout I get the message "PHP Error: Request security check failed REQUEST CHECK FAILED For your protection, access to this resource is secured against CSRF. If you see this, you probably didn't log out before leaving the web application. Human interaction is now required to continue." Please contact your server-administrator. Commenting out the CSP line in https.conf fixed it. Currently using: Header set Content-Security-Policy "default-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri ‘self' Which fails. Is there a recommended CSP for Roundcube? thanks, James.

5 9

CalDav in RoundCube
by Ing. Karol Krasňan 06 Oct '19

06 Oct '19

Hello, please is there a way how can I access existing CalDav calendars (sabredav) from roundcube? I had working installation on previous versions of RoundCube but now I have no luck with latest roundcube version. Thanks for help. Karol

3 2

line length
by mick crane 01 Oct '19

01 Oct '19

hello, Roundcube Webmail 1.4-rc1 here. Where can I set the line length to something like 70 characters and have compose sort it out for me so it starts a new line if I type more than that on one line ? regards mick -- Key ID 4BFEBB31

2 2

Addressbook not showing addresses
by TheCajun 26 Sep '19

26 Sep '19

Hi, I am running Fedora 30 1) At some point, and after some update, the autofill 'To' stopped working. The addressbook also does not show any of the existing entries made in Contacts. It shows the name and the group contact is in and that is all. Entering edit mode offers fields to enter information, but does not show existing addresses. They are in the MySQL database. I can see them there. 2) Where are the emails stored? I thought they would be under username/mail/. There are folders there, but none of the current emails are there. 3) Part of 2. I would like too archive all emails. I was hoping it would be as simple as copying the mail folder. Thank you, Durwin

2 1

Re: [RCU] Addressbook not showing addresses
by TheCajun 25 Sep '19

25 Sep '19

On 2019-09-25 11:00, Reindl Harald wrote: > Am 25.09.19 um 18:52 schrieb TheCajun: >> 3) Part of 2. I would like too archive all emails. I was hoping it >> would be as simple as copying the mail folder. > > you need to realize that roundcube is just a mail client like > Thunderbird, Outlook, Evolution.... Ok, 2 and 3 are resolved. I had forgotten I created a new user 'webmail' for this. I found the mail folder. Now for why the addresses do not show up in 'Contacts' as stated in Original email, item 1). -- .

1 0

Error When trying to update from the last git to version 1.4 rc2
by Fabián Burbano Gutiérrez 18 Sep '19

18 Sep '19

Dear: When trying to update from the last git to version 1.4 rc2, I get this message: ERROR: Target installation already in version 1.4-git. I don't know if it's the expected behavior and an update is impossible in that scenario. Maybe I should install from scratch? Or maybe I should report an incident? Thank you -- Fabián Burbano Gutiérrez

1 0

error upgrading RC from 1.3.9 to 1.3.10
by Sophie Loewenthal 17 Sep '19

17 Sep '19

Hi, I had this error 1.3.9 to 1.3.10. …SNIP... composer.json-dist CHANGELOG README.md UPGRADING LICENSE INSTALL done. JavaScript dependencies installation skipped... Running update script at target... Executing database schema update. ERROR: could not find driverError 500: Error connecting to database: could not find driver All done. Is sqlite still supported?

1 1

Roundcube Webmail 1.4 Release Candidate 2
by Thomas Bruederli 17 Sep '19

17 Sep '19

Dear subscribers We just published the long awaited second release candidate for the next major version 1.4 of Roundcube webmail. Many fixes, improvements and final touches have gone into this since the first release candidate was published. Check the Changelog [1] for a complete list of changes. We waited for some promised contributions which unfortunately never arrived but we now feel confident to call the new Elastic skin complete and ready to be officially released. As we’re moving towards the final release, we strongly encourage everybody to customize the Elastic skin using the _styles.less and _variables.less files to blend into your corporate design. You’ll find guidance for customization in the README.md file inside the skin folder. Rolling out a new and significantly different user interface should be carefully planned and we recommend to prepare your users for the change. Therefore the Elastic theme is not set to be the default theme. Adjust your config in order to enable it by default or let your users switch themselves in the user settings. Please note that the Classic skin will no longer be maintained and completely removed in future releases. Within the 1.4 release series, the Classic skin remains part of the package but it will not receive new features that were added to the Larry or Elastic themes. This is still a preview release and we recommend to test it on a separate environment. And don’t forget to backup your data before installing it. Download it from https://roundcube.net/download and keep on submitting bugs and send us your feedback. Best, Alec & Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.4-rc2

1 0

New security plugin for Roundcube: GuardianKey Auth
by Gesiel Bernardes 13 Sep '19

13 Sep '19

Hi, I would like to share with you a new security plugin for Roundcube: GuardianKey Auth. GuardianKey is a solution to protect systems against authentication attacks (Brute force, phishing password, etc). It uses Artificial Intelligence to detect if access attempts are from legitimate users. You can notify your users, block or log the attempts. Currently it is free for up to 100 users. More information: https://guardiankey.io/products/guardiankey-for-roundcube/ https://plugins.roundcube.net/packages/guardiankey/guardiankey_auth

1 0

Determining which version was installed: Complete Framework or Dependent
by Sophie Loewenthal 06 Sep '19

06 Sep '19

Hi, I’d like to patch our RC install to 1.3.10, but have forgotten which version I installed before. How could I determine if Complete Framework or Dependent was installed? I looked in the Changelog Upgrading and Install files but nothing noted. Regards, Sophie

2 5

Roundcube Webmail 1.3.10 released
by Thomas Bruederli 29 Aug '19

29 Aug '19

Dear subscribers We proudly announce the next service release to update the stable version 1.3. It contains fixes to several bugs backported from the master branch including minor security fixes around CSS and HTML cleanup. See the full changelog in the release notes on the Github download page [1]. This release is considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from https://roundcube.net/download. Best, Alec & Thomas [1] https://github.com/roundcube/roundcubemail/releases/tag/1.3.10

1 0

Truncated filenames of attachments
by Jorge 22 Aug '19

22 Aug '19

Hi All, I use Roundcube version 1.3.6 and I have problems with the attached files whose name is quite long (more than 90 characters). When downloading them the name is truncated to the first 91 characters and not including the extension, which is usually difficult to open correctly. For example: A23456789B23456789C23456789D23456789E23456789F23456789G23456789H23456789I23456789J23456789K23456789L23456789M23456789N23456789O23456789P23456789Q23456789.txt when downloading it RoundCube shows it to me as: A23456789B23456789C23456789D23456789E23456789F23456789G23456789H23456789I23456789J23456789K truncated to 91 characters and not including the extension. Has anyone had such problems? Is there any way to fix it? Jorge Colaccini --- El software de antivirus Avast ha analizado este correo electrónico en busca de virus. https://www.avast.com/antivirus

4 3

Roundcube, This content can not be displayed in a frame error
by David Mehler 12 Aug '19

12 Aug '19

Hello, Up until about half an hour ago I had a working roundcube installation running on php 7.3 and apache 2.4. I went in to tweak my X-Frame-Options headers among others in apache and now I'm getting the error this content can not be displayed in a frame. This is with ie11. Chrome isn't showing me messages either, but it isn't giving the error. Now I did have the webmail open in an ie tab during this working, but it was not logged in in fact I ignored it. I've sense put the option back to SAMEORIGIN, restarted both apache and php-fpm several times, refreshed the ie browser window, deleted temporary internet files, still getting the error. I've even gone in to defaults.inc.php (yes I know that's not standard practice) and changed x_frame_options from it's default of sameorigin to false, again restarted both apache and php-fpm as well as another ie refresh, still getting the error. I have not checked on another computer i'm not near one at the moment. Any ideas very welcome. Thanks. Dave.

2 1

Automatically insert address book source in message headers
by André Rodier 11 Aug '19

11 Aug '19

Hello all, I am actually writinghave written a milter with Python that can be useful, especially if you are using the Sieve filters. It is written for SOGo, but it should be very simple (even simpler) to translate into RoundCube address books. This is a very simple milter, written in Python, that do the following when a new message arrive. 1. Get the recipient uid "UID" from the email address. 2. Get the list of address books in the database for the user with uid "UID" 3. Search the sender email address in all the user's address books 4. If found at least one, add one header "X-AddressBook" which contains a list of all the address books found, with a prefixed syntax: X-AddressBook: "SOGo:Personnal, SOGo:Professional" So, in the case of RoundCube, the plugin would use RoundCube prefix, but the same principle. There are some limitations, of course, but it is still functional. - Once active, sieve filters should be simpler, no need to have a long list of from email address, just create an address book, and a put your contacts in it. - You can create a different automatic responder for each address book. - Because I am using this on Debian Stretch for now, I am using the available version of python-milter, which uses python2. When I will port this to buster, I will use the python3-milter package. I tried to made it compatible with version 3 as much as I could. - This is freshly new, and has not been tested in production yet. I am working on it. - You can test the behaviour using an SQLite database. Because my first idea was to use a global sqlite database synchronised with multiple address books, it was supposed to contain not the email address but a hash (sha256). - I am not a Python expert, and perhaps there are some errors in the code, but it should be readable. I had to disable a few pylint warnings, as I could not solve them at all, especially those related to the inherited class. - This is the first time I am writing a milter script, be indulgent. The code: https://github.com/progmaticltd/sogo-milters/blob/master/milter-abook/milte… I initially wrote this for HomeBox, I may add some documentation for the deployment if needed. Kind regards, André

1 1

managesieve-plugin closes connection before negotiation
by Florian Ruhnke (OiledAmoeba) 09 Aug '19

09 Aug '19

Hi, I do have an running dovecot-sieve installation. There is no problem to use it with rainloop or Thunderbird. But I can't get roundcube to work with sieve. Dovecot forces to initiate TLS before auth. SSL is disabled, only TLS 1.2+ is enabled. sieve-log of roundcube: [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: "IMPLEMENTATION" "Dovecot Pigeonhole" [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve" [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: "NOTIFY" "mailto" [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: "SASL" "" [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: "STARTTLS" [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: "VERSION" "1.0" [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: OK "Doctor, your Tardis is ready." [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> C: STARTTLS [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: NO "Error in MANAGESIEVE command received by server." [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> C: LOGOUT [31-Jul-2019 16:24:29 +0200]: <fqn6h82s> S: OK "Begin TLS negotiation now." maillog (dovecot errors): Jul 31 16:24:29 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=10.23.102.80, lip=10.23.102.251, TLS handshaking: SSL_accept() failed: error:1408F10B:SSL routines:ssl3_get_record:wrong version number, session=<rbUW4vqOC+MKF2ZQ> managesieve config.inc.php: $config['managesieve_port'] = 4190; $config['managesieve_host'] = 'mail.domain.tld'; $config['managesieve_auth_type'] = 'PLAIN'; $config['managesieve_auth_cid'] = null; $config['managesieve_auth_pw'] = null; $config['managesieve_usetls'] = true; //$config['managesieve_conn_options'] = null; $config['managesieve_conn_options'] = array( 'ssl' => array( 'verify_peer' => true, 'verify_peer_name' => true, 'allow_self_signed' => false, ), ); $config['managesieve_default'] = '/etc/dovecot/sieve/global'; $config['managesieve_script_name'] = 'managesieve'; $config['managesieve_mbox_encoding'] = 'UTF-8'; $config['managesieve_replace_delimiter'] = ''; $config['managesieve_disabled_extensions'] = array(); $config['managesieve_debug'] = true; $config['managesieve_kolab_master'] = false; $config['managesieve_filename_extension'] = '.sieve'; $config['managesieve_filename_exceptions'] = array(); $config['managesieve_domains'] = array(); $config['managesieve_vacation'] = 1; $config['managesieve_vacation_interval'] = 0; $config['managesieve_vacation_addresses_init'] = false; $config['managesieve_vacation_from_init'] = false; $config['managesieve_notify_methods'] = array('mailto'); $config['managesieve_raw_editor'] = true; The dovecot-log looks like roundcube is trying to initiate SSL3 but this is disabled. I think "Error in MANAGESIEVE command received by server." has to do with the deactivated SSL. Connecting to dovecot manually with gnutls-cli --starttls -p 4190 mail.domain.tld: Processed 306 CA certificate(s). Resolving 'mail.domain.tld:4190'... Connecting to '<IP>:4190'... - Simple Client Mode: "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate m ime foreverypart extracttext imapsieve vnd.dovecot.imapsieve" "NOTIFY" "mailto" "SASL" "" "STARTTLS" "VERSION" "1.0" OK "Doctor, your Tardis is ready." NO "Error in MANAGESIEVE command received by server." STARTTLS OK "Begin TLS negotiation now." *** Starting TLS handshake - Certificate type: X.509 - Got a certificate list of 2 certificates. - Certificate[0] info: - subject `CN=mail.domain.tld', issuer `CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US', serial 0x03c0d3d322307e5a997f654b435b56480773, RSA key 4096 bits, signed using RSA-SHA256, activated `2019-06-06 09:18:10 UTC', expires `2019-09-04 09:18:10 UTC', pin-sha256="8Sl17lWxWYSJcTcppQG4DLSBhEP/uRkZ5NTQfdkkoS4=" Public Key ID: sha1:62b08cf75ae6c45915db8d8c7bff6947788ac3b2 sha256:f12975ee55b1598489713729a501b80cb4818443ffb91919e4d4d07dd924a12e Public Key PIN: pin-sha256:8Sl17lWxWYSJcTcppQG4DLSBhEP/uRkZ5NTQfdkkoS4= - Certificate[1] info: - subject `CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US', issuer `CN=DST Root CA X3,O=Digital Signature Trust Co.', serial 0x0a0141420000015385736a0b85eca708, RSA key 2048 bits, signed using RSA-SHA256, activated `2016-03-17 16:40:46 UTC', expires `2021-03-17 16:40:46 UTC', pin-sha256="YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=" - Status: The certificate is trusted. - Description: (TLS1.3)-(ECDHE-SECP256R1)-(RSA-PSS-RSAE-SHA256)-(AES-256-GCM) - Options: "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve" "NOTIFY" "mailto" "SASL" "PLAIN LOGIN" "VERSION" "1.0" OK "TLS negotiation successful." LOGOUT OK "Logout completed." - Peer has closed the GnuTLS connection So, what do I have to do to get roundcube to talk to sieve?

2 2

error when enabling kolab calendar plugin, is there a fix?
by David Mehler 06 Aug '19

06 Aug '19

Hello, Trying to get kolab calendar plugin going with roundcube 1.3.9 and getting the following error, in the browser it's an error 500 in the log here's what I have, is there a fix? Thanks. Dave. #cat errors [05-Aug-2019 17:45:54 America/New_York] PHP Fatal error: Uncaught Error: Call to protected method rcmail_output_html::search_form() from context 'calendar_ui' in /usr/local/www/roundcube/plugins/calendar/lib/calendar_ui.php:795 Stack trace: #0 /usr/local/www/roundcube/program/include/rcmail_output_html.php(1145): calendar_ui->resources_search_form(Array) #1 [internal function]: rcmail_output_html->xml_command(Array) #2 /usr/local/www/roundcube/program/include/rcmail_output_html.php(1013): preg_replace_callback('/<roundcube:([-...', Array, '<roundcube:obje...') #3 /usr/local/www/roundcube/program/include/rcmail_output_html.php(634): rcmail_output_html->parse_xml('<roundcube:obje...') #4 /usr/local/www/roundcube/program/include/rcmail_output_html.php(488): rcmail_output_html->parse('calendar', false) #5 /usr/local/www/roundcube/plugins/calendar/calendar.php(333): rcmail_output_html->send('calendar.calend...') #6 /usr/local/www/roundcube/program/lib/Roundcube/rcube_plugin_api.php(493): calendar->calendar_view() #7 /usr/local/www/roundcube/index.php(295): rcube_plugin_ in /usr/local/www/roundcube/plugins/calendar/lib/calendar_ui.php on line 795

1 0

Configuring Classic for Desktop but Elastic for Phone?
by Philip Rhoades 05 Aug '19

05 Aug '19

People, Is there some way to do this? I want to stick with Classic for the Desktop because I think that is better suited but Elastic is obviously better for the phone - is there some way RCM can tell what the client is and choose the appropriate Skin? Thanks, Phil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

1 0

removing a roundcube enigma key
by David Mehler 04 Aug '19

04 Aug '19

Hello, I've got a new pgp key that I've imported with enigma. I'd now like to remove the old key, via enigma. I am not seeing how to do this. Can I get rid of the old key I know the ID via roundcube or if not can I do it via the CLI and then associate the new key ID with the profile? Thanks. Dave.

1 0

Lost Contacts Entries
by Mark Constable 04 Aug '19

04 Aug '19

Hi, I'm using 1.3.9 and recently switched my backend mailserver from an old server to a new server BUT the $config['default_host'] = 'ssl://mymail.server' setting remained exactly the same, only the IP for mymail.server was changed. I'd been caught out a few years ago when I changed default_host to a different IP and learnt the hard way and that doubled up with new user entries with the new IP and I think I sorted that out. This time the default_host setting is exactly the same. I did find a post that mentioned to run the bin/indexcontacts.sh script, which I did, and now the Contact labels and groups seem to be there but the actual contact content (name, email address etc) is missing. That contact content info looks like it's still in the database (obviously, I did not change or reinstall roundcube itself) but something to do with the id indexes for the contact content is not matching up with the addressbook entries. Any hint how I fix this or or patch it up manually if I have to? (I posted this in the forum before I found this mailing-list) -- Mark Constable 0419 530 037 https://spiderweb.com.au

4 6

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users