Users

users@lists.roundcube.net

5 participants
2944 discussions

Re: [RCU] Secure certain directories?
by Grant 13 Feb '14

13 Feb '14

>>>> Should I disallow access to certain roundcube directories in nginx? >>>> I'm especially concerned about arbitrary PHP execution in the user >>>> upload directory >>> >>> any directory containing user uploads has execution >>> disabled by definition >>> >>> Apache: >>> <IfModule mod_php5.c> >>> php_flag engine off >>> </IfModule> >>> >>> any directory only containing libraries and no directly >>> accessed files has access denied by definition >>> >>> that is completly independent of roundcube or whatever webserver >>> that are best practices in any case and not a question >>> >>> Apache: >>> <IfModule !mod_version.c> >>> Order deny,allow >>> Deny from all >>> </IfModule> >>> <IfModule mod_version.c> >>> <IfVersion < 2.4> >>> Order deny,allow >>> Deny from all >>> </IfVersion> >>> <IfVersion >= 2.4> >>> Require all denied >>> </IfVersion> >>> </IfModule> >> >> Are the default permissions you reference set via .htaccess files? > > it does not matter if you put them in .htaccess or <Directory>-directives > the final goal is the same and depends on your environment > > hence in my own applications they are deployed as part of packages > in .htaccess while with LocationMatch / Location for folders > like "upload" or "tmp" they are in global policies Ah, I misread that the first time around. It sounds like I need to be sure I disallow access and execution in certain directories. Which directories are those for roundcube? - Grant

2 1

Re: [RCU] Secure certain directories?
by Grant 13 Feb '14

13 Feb '14

>> Should I disallow access to certain roundcube directories in nginx? >> I'm especially concerned about arbitrary PHP execution in the user >> upload directory > > any directory containing user uploads has execution > disabled by definition > > Apache: > <IfModule mod_php5.c> > php_flag engine off > </IfModule> > > any directory only containing libraries and no directly > accessed files has access denied by definition > > that is completly independent of roundcube or whatever webserver > that are best practices in any case and not a question > > Apache: > <IfModule !mod_version.c> > Order deny,allow > Deny from all > </IfModule> > <IfModule mod_version.c> > <IfVersion < 2.4> > Order deny,allow > Deny from all > </IfVersion> > <IfVersion >= 2.4> > Require all denied > </IfVersion> > </IfModule> Are the default permissions you reference set via .htaccess files? - Grant

1 0

Forward Headers: In-Reply-To & References Headers
by Marcus Malcom 11 Feb '14

11 Feb '14

Hi all, RoundCube version: 0.9.1 I have a use case where I need to have the In-Reply-To & References header included for forwards. This is working just fine for replies, but not forwards. From my testing GMail does include these. Before I go creating a plugin, I wanted to see if this has been done before or if there is any support for it currently? Thank you, Marcus -- Marcus Malcom Mirth Corporation Senior Software Engineermarcusm(a)mirth.com 714-389-1319 -- CONFIDENTIALITY NOTICE: The information contained in this electronic transmission may be confidential. If you are not an intended recipient, be aware that any disclosure, copying, distribution or use of the information contained in this transmission is prohibited and may be unlawful. If you have received this transmission in error, please notify us by email reply and then erase it from your computer system.

2 3

Large inbox slow
by List 07 Feb '14

07 Feb '14

We are hosting a webmail service using roundcube 0.8.1 and a number of our users with inboxes in excess of 8000-10000 messages are experiencing extremely slow response times (We also downloaded a recent copy and it's just as slow). We are using Dovecot 2.1 as the IMAP server and have not had any issues with clients like outlook or Thunderbird, but as far as we understand it those clients keep a local copy of the messages for quick retrieval while Roundcube is doing everything over IMAP. Is there any thing we can do or should look at to improve the response times for loading an inbox with many thousands of messages?

5 6

Manage Sieve intercept facebook mail
by Davide Perini 03 Feb '14

03 Feb '14

Hi, is there a way to intercept the mail that sends facebook groups? I would like to move the mail sent from facebook groups to another folder, I would like to do it for certain mail address only. Facebook groups sends mail in a strange format and I cannot intercept the recipient email address using the manage sieve plugin. I cannot filter for "TO" because the TO is something like: To: "name of the facebook groups." <isOfTheGroups(a)groups.facebook.com> In the mail header I see that the mail of the recipient is specified in the*FOR* attribute: Received: from mx-out.facebook.com (outmail009.ash2.facebook.com [66.220.155.143]) by mail.mydomain.org (Postfix) with ESMTPS id C151B2C209 *for *<*myemail(a)mydomain.or*g>; Sun, 2 Feb 2014 21:04:00 +0100 (CET) Should I use that for the filter? If yes, how can I do it? Thanks.

1 0

List selection does not easily work
by Henning 01 Feb '14

01 Feb '14

Hi, in my new version of roundcubemail it is not easy to select list items. By single clicking list items, e.g. in folder managment, they do not get selected. You have do some little drag & dropping until it works. This is very annoying... Any clue on this? I'm running ubuntu with kolab-packages roundcubemail 1:1.0~dev20131031-1~kolab1.2 roundcubemail-plugins-kolab 1:3.1.7-0~kolab1 Henning

1 0

Integrating Roundcube login into WordPress page
by ɹןʇnqן 31 Jan '14

31 Jan '14

I have a text widget in WordPress that logs into squirrel mail and redirects the user to their inbox. I’ve been looking for a way to do with is RoundCube, but haven’t found anything so far. Wordpress and round cube are installed in separate folders, of course, but are currently on the same server. However, a solution that is not dependent on localhost would be best, of course. Has anyone done this? I don’t want to duplicate effort. And I don’t want this to be tied to Wordpress, really. I just want a widget to appear in the column with a login and password field someone can fill in, hit “login” and be taken to Roundcube. -- ɹןʇnqן

1 0

Release candidate for version 1.0
by Thomas Bruederli 31 Jan '14

31 Jan '14

Dear all, We just published the feature-complete release candidate for the upcoming version 1.0. After adding some new features in 1.0-beta we further cleaned up the code, fixed some more bugs and prepared everything for the long awaited major release. So we invite all early adopters to test this release candidate and report remaining bugs to our bug tracker. See the complete Changelog at http://trac.roundcube.net/wiki/Changelog and download the new packages from http://roundcube.net/download. Kind regards, Thomas P.S. Meet us in Brussels at FOSDEM this weekend. We have a stand in the K building.

1 0

filter features
by Hazel 27 Jan '14

27 Jan '14

Hello, all, I'm having some trouble using the filter settings. Firstly, I have a number of filter categories that nest inside one another (e.g. different destinations for subject contains "AB*" vs. subject contains "ABC*"), so the order of my filters is critical. Unfortunately, I can't find any way of editing/changing the order of my filters except by editing the sieve file, which I am enjoined not to do (I think it just breaks the GUI), or deleting and re-adding in the desired order. Does anyone know a better way? Secondly, is there any way to run a specific custom filter (or group of filters) on request rather than running it on receipt? Examples: "Right, I've read all the important bits from that mailing list, clear the lot out of my inbox and into its own folder", or just "I'm done with my inbox contents, now file it all". I used to use this facility a lot in KMail, and I found it really helped keep my inbox clear, and saved a surprising amount of time compared to manually filing each e-mail. I'm currently running searches and dragging the results. Sorry if this is a feature request, please feel free to tell me, constructively, where to put it. Regards,

3 2

Bugheader plugin
by Sandor Takacs 22 Jan '14

22 Jan '14

Hello! I just forked the original bugheader plugin (https://bitbucket.org/gerundt/roundcube-bugheader) to GitHub and I added GitHub Issues and Pulls to the displayed special headers. You can find the modified plugin at https://github.com/Takika/rc_bugheader . -- Takika

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Users