Users

users@lists.roundcube.net

2943 discussions

Modification request - default font of sent emails
by Thomas Praider 03 Nov '11

03 Nov '11

Hello I am searching for a modification to change the default font of sent emails. At the moment Roundcube sends no font information afaik, so sent emails are renedered in most email clients at the received side in Times New Roman. If unformatted, TinyMCE shows a sans-serif font, which is not what you get at the recipient side. Willing to pay if you can solve this issue. Ideally for me would be a definable font face & size (Arial, 12pt), which then shows up consistently in the Roundcube Editor and in the produced HTML Mail. Many thanks, Tom -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

3 2

FYI : RuleID 981248 in modsecurity_crs_41_sql_injection_attacks breaks RC
by S.Loewenthal 03 Nov '11

03 Nov '11

Hi there, This tripped me up today so thought I shoud add it. ModSec rule 981248 contained in CRS base rules modsecurity_crs_41_sql_injection_attacks will cause RC to break as shown below. [Thu Nov 03 15:57:49 2011] [error] [client 82.173.139.52] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:@.+=\\\\s*\\\\(\\\\s*select)|(?:\\\\d+\\\\s*x?or|div|like|between|and\\\\s*\\\\d+\\\\s*[\\\\-+])|(?:\\\\/\\\\w+;?\\\\s+(?:having|and|x?or|div|like|between|and|select)\\\\W)|(?:\\\\d\\\\s+group\\\\s+by.+\\\\()|(?:(?:;|#|--)\\\\s*(?:drop|alter))|(?:(?:;|#|--)\\\\s*(?:update|insert)\\\\s ..." at REQUEST_COOKIES:roundcube_sessid. [file "/modsec/modsec-crs/base_rules/modsecurity_crs_41_sql_injection_attacks.conf"] [line "539"] [id "981248"] [msg "Detects chained SQL injection attempts 1/2"] [data "7or"] [severity "CRITICAL"] [tag "WEB_ATTACK/SQLI"] [tag "WEB_ATTACK/ID"] [hostname "webmail.example.com"] [uri "/"] [unique_id "TrKr7VjGXw0AABsFSnEAAAAB"] A work around is to add this to the vhost: SecRuleRemoveById 981248 BR, S -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 0

Mysql 5.5.17 debian squeeze
by Simon Loewenthal 02 Nov '11

02 Nov '11

Hi there, MySQL 5.5.17 has been released for Debian 6. Has anyone tested this with current RC? Or does it really need any testing? I shall try it hopefully today. Best regards, s -- If you cannot beat them, try to côntrole them. -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 2

Server Error on Recipient Field
by Jon Reynolds 02 Nov '11

02 Nov '11

Hello all, First message to the mailing list. I joined as I have a question. I just installed the latest Roundcube on my Ubuntu 10,04 LTS Server. I have used Roundcube before but didn't have this problem before. The problem is that when I start typing in the recipient box, instead of the auto-complete function starting to display possible names, I get a red box at the top with the following message: Server Error! (Internal Server Error) I have installed the google_contacts plugin, but I also had that before (which worked perfectly, thank you!). Any ideas where to start looking would be appreciated. Thanks and regards, Jon Reynolds ----------------------- www.jcrdevelopments.com -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 0

Re: [RCU] Modification request - default font of sent emails
by Thomas Praider 31 Oct '11

31 Oct '11

>Unless you send HTML mail. Exactly those HTML Mails is what I am talking about, they're sent without formatting the font by default. I want to set a default font for our roundcube installation. Thanks, Tom -- From: Marcel de Haas To: Date: Monday, October 31, 2011, 3:58:16 PM Subject: [RCU] Modification request - default font of sent emails ===8 Hi Tom, I would think this is a client setting which you cannot influence. Unless you send HTML mail. Plain text is text without formatting I'm afraid. Regards, Marcel On 31.10.2011 14:55, Thomas Praider wrote: Hello I am searching for a modification to change the default font of sent emails. At the moment Roundcube sends no font information afaik, so sent emails are renedered in most email clients at the received side in Times New Roman. If unformatted, TinyMCE shows a sans-serif font, which is not what you get at the recipient side. Willing to pay if you can solve this issue. Ideally for me would be a definable font face & size (Arial, 12pt), which then shows up consistently in the Roundcube Editor and in the produced HTML Mail. Many thanks, Tom ===8 Links: ------ [1] mailto:marcel@bommelhaas.nl [2] mailto:users@lists.roundcube.net -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 0

Auto activate default folders on login and display them
by Gerson Felipe Schwinn 31 Oct '11

31 Oct '11

Hello! I installed the latest version of RoundCube (0.6) on our new server. When the user makes login, the RoundCube creates default folders, but they do not appear in the list.Every time we have to go to your preferences, enable the folders and then "Folder Special" and click save.It has a way to enable folders automatically at login, as was the case in previous versions? Thanks! Att. Gerson Felipe Schwinn Sócio - Gerente de TI http://www.onehost.com.br http://www.oneweb.com.br -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

4 4

database schema (specifically identities.standard and users.alias)
by B C 29 Oct '11

29 Oct '11

I am just wondering what the meaning of the "standard" column is in the identities table. (On this one it is because we have a mailbox-postcreation script that we run in PostfixAdmin so that when a new mailbox is created, and that postmaster defines a proper Name, we can already have that name in their roundcube identity. But we noticed we weren't setting the standard column to 1, as RoundCube would if creating the identity itself.) Also the alias column in the users table. How does that get set or used? I'm puzzled by the small subset of users that have this column set. Though I am delighted to learn that it can be used to contain an alternate username that works to login! Benjamin -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 1

[Q] mysql.update.sql Can't DROP 'idx'; check that column/key exist
by Simon Loewenthal 25 Oct '11

25 Oct '11

Hi, After a RC upgrade (.5.4 -> 0.6), can one blindly run the mysql.update.sql, or should I adjust it accordingly to the release I am upgrading from? I ask as I tried and it complained:- root@peon /www/roundcube/SQL # mysql*-p roundcubemail < mysql.update.sql * Enter password: ERROR 1091 (42000) at line 7: Can't DROP 'idx'; check that column/key exist Entry in the mysql.update.sql reads: ALTER TABLE `messages` DROP INDEX `idx`, DROP INDEX `uid`; mysql> describe messages; +------------+------------------+------+-----+---------------------+----------------+ | Field | Type | Null | Key | Default | Extra | +------------+------------------+------+-----+---------------------+----------------+ | message_id | int(11) unsigned | NO | PRI | NULL | auto_increment | | user_id | int(10) unsigned | NO | MUL | 0 | | | del | tinyint(1) | NO | | 0 | | | cache_key | varchar(128) | NO | | NULL | | | created | datetime | NO | MUL | 1000-01-01 00:00:00 | | | *idx* | int(11) unsigned | NO | | 0 | | | *uid* | int(11) unsigned | NO | | 0 | | | subject | varchar(255) | NO | | NULL | | | from | varchar(255) | NO | | NULL | | | to | varchar(255) | NO | | NULL | | | cc | varchar(255) | NO | | NULL | | | date | datetime | NO | | 1000-01-01 00:00:00 | | | size | int(11) unsigned | NO | | 0 | | | headers | text | NO | | NULL | | | structure | text | YES | | NULL | | +------------+------------------+------+-----+---------------------+----------------+ 15 rows in set (0.00 sec) Regards, S -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

3 7

RC 0.6 ModSecurity 2.2.2 CRS optional rules (particularing modsecurity_crs_16_session_hijacking hits)
by Simon Loewenthal 24 Oct '11

24 Oct '11

Hi, I started playing with the modsecurity rules today. I noticed that CRS modsecurity rule modsecurity_crs_16_session_hijacking.conf will hit on Roundcube 0.6 on my test server. I have not used modsec on any other version of RC. Enabling the CRS 2.2.2 options rules breaks this RC set-up. I'm not an expert on these rules, so it is quite likely that I misinterpreted the results. [24/Oct/2011:11:17:39 +0200] [webmail.example.com/sid#7f9bb5d47e08][rid#7f9bc55babd0][/][1] Access denied with code 403 (phase 1). Match of "streq %{SESSION.IP_HASH}" against "TX:ip_hash" required. [file "/etc/apache2/modsec-crs/optional_rules/modsecurity_crs_16_session_hijacking.conf"] [line "35"] [id "981059"] [msg "Warning - Sticky SessionID Data Changed - IP Address Mismatch."] [24/Oct/2011:11:23:16 +0200] [webmail.example.com/sid#7f06a783b698][rid#7f06b58a10e0][/][1] Access denied with code 403 (phase 1). Match of "streq %{SESSION.UA_HASH}" against "TX:ua_hash" required. [file "/etc/apache2/modsec-crs/optional_rules/modsecurity_crs_16_session_hijacking.conf"] [line "38"] [id "981060"] [msg "Warning - Sticky SessionID Data Changed - User-Agent Mismatch."] Some rules in these hit as well: Message: Warning. Match of "eq 1" against "&ARGS:CSRF_TOKEN" required. [file "/etc/apache2/modsec-crs/optional_rules/modsecurity_crs_43_csrf_protection.conf"] [line "31"] [id "981143"] [msg "CSRF Attack Detected - Missing CSRF Token."] Message: Warning. Match of "rx (?i:\\;? ?httponly;?)" against "TX:sessionid" required. [file "/etc/apache2/modsec-crs/optional_rules/modsecurity_crs_55_application_defects.conf"] [line "71"] [id "981184"] [msg "AppDefect: Missing HttpOnly Cookie Flag."] The other CRS and ASR rules seem fine so far... Its possible that this is a apache misconfiguration by me. Has anyone else used the modsecurity optional rule sets on Roundcube? Best regards, S -- Email simon AT klunky DOT co DOT uk PGP is optional: 4BA78604 I won't accept your confidentiality agreement, and your Emails are kept. ~Ö¿Ö~ -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

1 2

Aborted session ... no valid session data found
by ben＠electricembers.net 21 Oct '11

21 Oct '11

I know there is this thread: http://lists.roundcube.net/mail-archive/users/2011-09/0000042.html And this ticket: http://trac.roundcube.net/ticket/1488087 But is there news on how we might roll out 0.6 (upgrade from 0.5.1) without being able to have users remove cookies? Perhaps relatedly, we do want to change our 'des_key' but am unsure if that is safe to do. Also 'session_domain' which we seem to have in production as '' (NULL) Should we just wait on 0.7 since 0.7-beta is the "milestone?" We have a great testbench here and would be delighted to help however we may. . . Ben -- List info: http://lists.roundcube.net/users/ BT/9b404e9e

2 2

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users