Users

users@lists.roundcube.net

2913 discussions

Start a nNew thread

confirming my request to participate in this list
by Louise Olson 25 Aug '24

25 Aug '24

hope I've done this right

3 4

Security updates 1.5.8 and 1.6.8 released
by Aleksander Machniak 04 Aug '24

04 Aug '24

Dear subscribers, We just published security updates to the 1.6 and 1.5 LTS versions of Roundcube Webmail. They both contain fixes for recently reported security vulnerabilities. - Fix XSS vulnerability in post-processing of sanitized HTML content [CVE-2024-42009] - Fix XSS vulnerability in serving of attachments other than HTML or SVG [CVE-2024-42008] - Fix information leak (access to remote content) via insufficient CSS filtering [CVE-2024-42010] Credits to Oskar Zeino-Mahmalat (Sonar) for all these findings and thanks for providing a very detailed report in a private communication. See the full changelogs in the release notes on the Github download pages for the updated versions 1.6.8 and 1.5.8. https://github.com/roundcube/roundcubemail/releases/tag/1.6.8 https://github.com/roundcube/roundcubemail/releases/tag/1.5.8 We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.5.x with this new versions. Kind regards, Alec

1 0

Filter does not work
by roman.diem＠gmx.ch 28 Jul '24

28 Jul '24

I created an out of office reply in the filter and saved it. Unfortunately this no longer works. Can someone help me?

3 4

vacation sending with user and hostname instead of my-email/reply-to
by Marc 26 Jul '24

26 Jul '24

What could be the issue that the vacation is not using the email addresses listed in the default identity, "Reply sender address" or " My e-mail addresses" but uses the username@hostname in stead. roundcube 1.6

1 0

Warning for executable attachments
by Andy Bennett 26 Jul '24

26 Jul '24

Hi, I've been a happy Roundcube user since 2008 which, now that I look it up, seems to be almost the beginning. Thanks for a great tool. Recently we've discovered a need to provide some kind of warning when the user receives an eMail with an executable or archive (zip, tar, dmg) attachment. We use these kinds of attachments legitimately in our day-to-day work so don't want to filter them at the mail gateway, but there's a compliance need to tell the user that it may be dangerous. I've had a look in the config as well as the plugin list and Google'd a bit but can't find anything that might be suitable. I saw something about a warning that comes up when the extension and the mime-type don't match but that doesn't seem to be what I'm looking for and I can't work out if it can be configured and, if so, how to configure it to do what I want. Can anyone point me at a config option, plugin or something else that will allow us to display a warning when an eMail contains a "potentially dangerous" attachment? Thanks! Best wishes, @ndy -- andyjpb(a)ashurst.eu.org http://www.ashurst.eu.org/ 0x7EBA75FF

3 3

Re: log file date format
by Jim Pazarena 25 Jul '24

25 Jul '24

On 2024-07-24 9:38 AM, list--- via Users wrote: >> I have updated to 1.6.7 and my log files are now being generated in >> UTC rather than my preferred PST/PDT. I do not use syslog for rcube. >> >> I have adjusted my config.inc.php: >> $config['log_date_format'] = 'Y-m-d H:i:s'; >> which is how my previous version of rcube was set. >> but the logs are now 7 hours advanced (UTC). > > > Check your PHP settings. > > /etc/php.ini > date.timezone = America/Los_Angeles > > There is also a timezone setting in roundcube, but i think this is what > gets displayed to the end user and doesn't affect the time zone used on > the server. > > ./config/defaults.inc.php > // use this timezone to display date/time > // valid timezone identifiers are listed here: > php.net/manual/en/timezones.php > // 'auto' will use the browser's timezone settings > $config['timezone'] = 'auto'; yipes. I had also updated php, and my original php.ini file got blasted away. roundcube log files now have the correct date/timezone after I added the date.timezone setting to php.ini. Thank you much ! -- Jim Pazarena roundcube(a)paz.bz Haida Gwaii - British Columbia - Canada

1 0

log file date format
by Jim Pazarena 25 Jul '24

25 Jul '24

I have updated to 1.6.7 and my log files are now being generated in UTC rather than my preferred PST/PDT. I do not use syslog for rcube. php 8.3.8 http 2.4.62 I have adjusted my config.inc.php: $config['log_date_format'] = 'Y-m-d H:i:s'; which is how my previous version of rcube was set. but the logs are now 7 hours advanced (UTC). suggestions appreciated. -- Jim Pazarena roundcube(a)paz.bz Haida Gwaii - British Columbia - Canada

2 1

Connection failed - failed to reach server
by Stephan Fourie 24 Jul '24

24 Jul '24

Hi everyone, Sitting with an issue and hoping someone has some advice. We have a user where normal email sending works. But, when an email is sent to a large group and they click send, the circle button appears and after around 4 - 5 minutes the error 'connection error [failed to reach server]' is presented. On the email server that's hosting the email account, Exim reports the following error 11 minutes later after the web server (Apache / fpm) timeouts, which are set to 600 seconds, on the Roundcube server are reached: -------------------------------------------------------------------------------------- 2024-07-23 10:18:04 unexpected disconnection while reading SMTP command from redacted-hostname (redacted-hostname) [Redacted-IP-address] D=11m29s -------------------------------------------------------------------------------------- Apache error log: -------------------------------------------------------------------------------------- [Tue Jul 23 10:16:34.366746 2024] [proxy_fcgi:error] [pid 1170321:tid 1170362] (70007)The timeout specified has expired: [client REDACTED] AH01075: Error dispatching request to : (polling), referer: https://REDACTED/?_task=mail&_action=compose&_id=4318354025669f63d117867 -------------------------------------------------------------------------------------- All web server / PHP related timeouts are set to above 300 seconds. All settings in the Roundcube configuration related to timeouts look okay. Any advice on what more can be checked will be appreciated. Thanks! Stephan

2 1

smtp servers
by mick.crane 22 Jul '24

22 Jul '24

can I set different smtp servers for different email addresses? mick

6 8

Multiple domains config
by timothy 22 Jul '24

22 Jul '24

Hello gurus, I use the latest version of roundcube as my webmail, and I want to allow webmail access to free.fr and gmx.it (I have accounts with these two email providers).So set the following in rc's configuration file. $config['imap_host'] = array('ssl://imap.gmx.com:993','ssl://imap.free.fr:993'); $config['smtp_host'] = array('imap.gmx.com' => 'ssl://mail.gmx.com:465', 'imap.free.fr' => 'ssl://smtp.free.fr:465' ); $config['mail_domain'] = array( 'imap.gmx.com' => 'gmx.it', 'imap.free.fr' => 'free.fr' ); When I open webmail, it always displays a dropdown menu for me to select an IMAP host. This is so frustrating. How to disable this drop-down menu and automatically match email addresses to imap hosts? Thanks.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users