Users

users@lists.roundcube.net

15 participants
2943 discussions

Disable Email field in Identities
by Nipun Jain 09 Apr '06

09 Apr '06

This is with regard to the spoofed mail problem I had posted earlier. I have (after getting my hosting account re enabled) found that if you set your email id to an existing email at your domain, then you can easily spoof your emails as coming from that id. This however is not true for email ids that don't exist on your domain or are outside your domain. So a simple solution would be to disable the E-mail text field in the Identity section of Roundcube. Can anyone guide me as how to accomplish the same? I know it would still be possible to send such spoofed mails using an email client but most of my users only use webmail, and so I want this spoofing to be not possible through webmail.

2 1

Spoofed Mails
by Nipun Jain 07 Apr '06

07 Apr '06

I am facing a problem of email spoofing with my webmail (running on roundcube). Some unscruplous person(s) using my webmail has set their reply to address as info(a)mydomain.com and / or administrator(a)mydomain.com in their identity and is / are using that identity to send email to other people on their webmail account at mydomain.com. Now the recipient gets fooled by this spoofed mail as roundcube (and maybe other web based email) displays the sender as the spoofed email id (i.e. info(a)mydomain.com or administrator(a)mydomain.com) and not the actual email id used to send the email. I myself have received a couple of such mails and was perplexed to see to get an email from administrator(a)mydomain.com as I am the admin, and my email is admin(a)mydomain.com (administrator(a)mydomain.com does not exist). I tried to figure out the actual email id by reading the email headers but it didnt show the actual email id, only showed the spoofed email id as administrator(a)mydomain.com (or info(a)mydomain.com). Now is this supposed to work this way? I mean setting the reply to field to any email address in roundcube enables one to spoof the sender's email id? Is there any way to disable the "Reply To" field in roundcube so that users are unable to send spoofed mails?

6 13

Shared IMAP folder subscriptions
by Hamish 07 Apr '06

07 Apr '06

Hello Is there something to configure to allow roundcube to support shared IMAP folders? We use a lot of these and I cant seem to get roundcube to show them, I have tried in personal settings under the subscriptions tab, but it only seems to list the folders for the specific user. Any ideas on how to get this right? Thanks, H

1 0

Re: Spoofed Mails
by Kyle Rollins 05 Apr '06

05 Apr '06

It's probably because your server is on the internet and open for relay (not a roundcube problem)...if you haven't locked it down others may be using it to send spam among other things. If you want to check for open relay try this http://www.checkor.com/ or email me directly and maybe I can help...you may also want to check to see if you have been blacklisted...if someone keeps using your server then you may get blacklisted soon. check for blacklisting here: http://www.mail-abuse.com/cgi-bin/lookup ________________________________ From: Nipun Jain [mailto:jain.nipun@gmail.com] Sent: 05 April 2006 17:15 To: users(a)lists.roundcube.net Subject: Spoofed Mails I am facing a problem of email spoofing with my webmail (running on roundcube). Some unscruplous person(s) using my webmail has set their reply to address as info(a)mydomain.com and / or administrator(a)mydomain.com in their identity and is / are using that identity to send email to other people on their webmail account at mydomain.com. Now the recipient gets fooled by this spoofed mail as roundcube (and maybe other web based email) displays the sender as the spoofed email id ( ie. info(a)mydomain.com or administrator(a)mydomain.com) and not the actual email id used to send the email. I myself have received a couple of such mails and was perplexed to see to get an email from administrator(a)mydomain.com as I am the admin, and my email is admin(a)mydomain.com (administrator(a)mydomain.com does not exist). I tried to figure out the actual email id by reading the email headers but it didnt show the actual email id, only showed the spoofed email id as administrator(a)mydomain.com (or info(a)mydomain.com). Now is this supposed to work this way? I mean setting the reply to field to any email address in roundcube enables one to spoof the sender's email id? Is there any way to disable the "Reply To" field in roundcube so that users are unable to send spoofed mails? ______________________________________________________________________ Scanned by the MessageLabs Email Security System provided by Conosco. http://www.conosco.com ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________

1 0

Can't upload attachments when safe_mode activated
by Alexis Domjan 04 Apr '06

04 Apr '06

Hello, I activated the safe_mode for php and I then applied the patch given in the bug track of roundcubemail (applied manually). However I still have some problems uploading attachments. When the file is uploaded it can't access it as the script is not owned by the webserver user (www-data). Here's the error: move_uploaded_file(): SAFE MODE Restriction in effect. The script whose uid is 2152 is not allowed to access /tmp/rcmAttmnt8pfjc9 owned by uid 33 in [...]roundcubemail/program/steps/mail/upload.inc on line 42, referer: [...]/roundcubemail/?_auth=4107d2f552680f686d1298e287301ea5cd6572b4&_task=mail&_action=compose Am I doing something wrong ? RoundCubeMail version: Version 0.1-20060320 (from CVS) Does anyone encounter the same problem ? Best regards -- Horus Networks Sàrl http://www.horus.ch Responsable technique Alexis Domjan <adomjan(a)horus.ch>

2 4

Time change and weird time warp problem
by T. Shoes 04 Apr '06

04 Apr '06

The time change (add an hour) did not take with Round Cube even though system time updated. Somewhere in the code I need to fix? Also, I'm seeing weird timewarp issues with certain users. Their date shows up as 1969 in my inbox. What causes this? -- There is no "I" in team, but there is "Iran" in "Uranium"..

2 1

Only getting IMAP text?
by Barry Sears 04 Apr '06

04 Apr '06

Hey everyone, I'm trying to get this going from CVS on Debian with exim4. I log in, and the user is created, but all I get to see is the text below. I'm using ssl, if that has anything to do with it. Is this a setting I'm missing, or something else? Thanks, Barry Sears * CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY UNSELECT SCAN SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND LOGIN-REFERRALS AUTH=PLAIN AUTH=LOGIN cp01 OK CAPABILITY completed Tried PLAIN: Resource id #32

2 1

LDAP and Export in Address Book
by T. Shoes 03 Apr '06

03 Apr '06

Just happened to notice two new icons in the "Address Book" portion of Beta 1. (at least I believe them to be new, since I've never noticed them until now) LDAP searching and Exporting Are these options active yet, or just place holders for new features? -- There is no "I" in team, but there is "Iran" in "Uranium"..

2 1

LDAP Functionality
by Marc D. Murray 31 Mar '06

31 Mar '06

Hey All, So far, I'm liking this RoundCube mail client. I would like to know though, what do I need to do to get the LDAP Address Book functionality to work on Debian? I've got roundcube working, but each attempt to use the LDAP Directory search results in an error in /var/www/roundcube/log/errors that says : [30-Mar-2006 21:15:58 -0500] LDAP Error: No ldap support in this installation of php. in on line 0 I've installed libapache2-mod-php4 and php4-ldap from the debian repositories. I've also used pear to download and install DB_ldap2 and Net_ldap (both beta versions) and I still get this error. I've looked at the file program/include/rcube_ldap.inc and the error is generated by line :47 that says : if (!function_exists('ldap_connect')) raise_error(array("type" => "ldap", "message" => "No ldap support in this installation of php."), TRUE); I don't know PHP at all or I'd be able to help here, but I'm lost. How can I make that function exist? -- Marc DM www.phronein.com/marcdm

1 0

How to hide some folders using Kolab server
by Iñaki 30 Mar '06

30 Mar '06

Hi, this is my first post in this list. I use Kolab server that is a groupware with Cyrus, so the users have special folders for storing contacts, tasks, and calendar in XML format. Because of it, using RoundCube I see these IMAP folders that should be hiden. Is there any way to hide them? Of course I cannot unsuscribe from them, I need to be suscribed for use them in Kontact. I've read the entiry main configuration but only found the following: // only list folders within this path $rcmail_config['imap_root'] = ''; But I don't know how to use it, and in fact I don't know if this the solution to my problem. May be? Thanks for any help. -- y hasta aquí puedo leer...

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users