Re: [RCU] Updating RC
I wonder if maybe you've hit this bug: https://github.com/roundcube/roundcubemail/issues/8642 Sean On 8 Dec 2022, at 4:33, Thomas Anderson wrote: Ok figured it out. In /etc/master.cf had to change tls_wrapper mode = no then it all worked. But, it killed my thunderbird client from being able to send..hmmm On 08/12/2022 10:00, Thomas Anderson wrote: I also learned something =) I did change the directory permissions to root, and I was able to see emails in the client, am able to write emails, receive emails, logout, login, basically roundcube functions as I expect, minus I cannot SEND emails. Apparently, there is still not a permission or set correctly. I can send from a thunderbird client, so I think postfix is fine? I have been checking logs, but all I see is a ssl_accept error to my server, and that it timed out. That is the behavior I am seeing on my roundcube webmail in the brower -- it just hangs on "sending" and it eventually times out with error -1 I will keep trying to figure it out, if anyone can send me a bone, I would greatly appreciated it. On 06/12/2022 23:10, Roas Solutions wrote: I would not like to receive these emails anymoe anyone a suggestion how i can fix this? On Tue, 6 Dec 2022, 16:00 Mike Burger, wrote: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ On 03/12/2022 12:42, Bernardo Reino wrote: Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
Ok figured it out. In /etc/master.cf had to change tls_wrapper mode = no then it all worked. But, it killed my thunderbird client from being able to send..hmmm On 08/12/2022 10:00, Thomas Anderson wrote: I also learned something =) I did change the directory permissions to root, and I was able to see emails in the client, am able to write emails, receive emails, logout, login, basically roundcube functions as I expect, minus I cannot SEND emails. Apparently, there is still not a permission or set correctly. I can send from a thunderbird client, so I think postfix is fine? I have been checking logs, but all I see is a ssl_accept error to my server, and that it timed out. That is the behavior I am seeing on my roundcube webmail in the brower -- it just hangs on "sending" and it eventually times out with error -1 I will keep trying to figure it out, if anyone can send me a bone, I would greatly appreciated it. On 06/12/2022 23:10, Roas Solutions wrote: I would not like to receive these emails anymoe anyone a suggestion how i can fix this? On Tue, 6 Dec 2022, 16:00 Mike Burger, wrote: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ On 03/12/2022 12:42, Bernardo Reino wrote: Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
I also learned something =) I did change the directory permissions to root, and I was able to see emails in the client, am able to write emails, receive emails, logout, login, basically roundcube functions as I expect, minus I cannot SEND emails. Apparently, there is still not a permission or set correctly. I can send from a thunderbird client, so I think postfix is fine? I have been checking logs, but all I see is a ssl_accept error to my server, and that it timed out. That is the behavior I am seeing on my roundcube webmail in the brower -- it just hangs on "sending" and it eventually times out with error -1 I will keep trying to figure it out, if anyone can send me a bone, I would greatly appreciated it. On 06/12/2022 23:10, Roas Solutions wrote: I would not like to receive these emails anymoe anyone a suggestion how i can fix this? On Tue, 6 Dec 2022, 16:00 Mike Burger, wrote: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ On 03/12/2022 12:42, Bernardo Reino wrote: Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
And to all that have corrected me, thank you. I need to study up a bit more on security, I realize. El 2022-12-06 14:50, Benny Pedersen escribió: Gerardo Contreras skrev den 2022-12-06 16:27: Root should NOT own any directory that is publicly accessed, such as web content. Should there be a breach, then the visitor will have root access to the whole system. It is better if the directory is owned by the web server, and that depends on your platform. Have you checked other security mechanisms? Sometimes, for example, SELinux on RedHat is a big pain in the butt if you don't configure it properly. any files in tarball MUST be owned by Root, period. and all config.inc.php and default.inc.php included excepteions is ./logs ./temp in tarball patch, check .htaccess files in this dirs SELinux is not needed to be on if strong unix permisions is enforced ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
Mike Burger skrev den 2022-12-06 15:41: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. bad advise don't doit, if you belive "chown -R wepserver-user /" now just wait for POST in urls that will allow any files in filesystem to be remotely updated simply dont ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
Roas Solutions skrev den 2022-12-06 23:10: I would not like to receive these emails anymoe anyone a suggestion how i can fix this? http://lists.roundcube.net/mailman/listinfo/users type your email address into unsubscribe, press the button, and confirm in mail received, done ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
I would not like to receive these emails anymoe anyone a suggestion how i can fix this? On Tue, 6 Dec 2022, 16:00 Mike Burger, wrote: > I suggest chown'ing the entire Roundcube directory structure to be owned > by your web server user (apache?), since your web server doesn't (or, at > least, shouldn't be set to) run as root. > > On 2022-12-06 04:39, Thomas Anderson wrote: > > thanks Mr. Reino, > > It seemed to work, but I have been unable to get it up and running after a > couple of days of meddling with it. > > I am getting, what I think a permission error. What should the roundcube > permissions be set to? Right now, > > they are set as root, which should work, right? > > Or, should I set them to have the same permissions as the apache "user"? > > Right now I am getting this error.. > Symbolic link not allowed or link target not accessible: > /var/lib/roundcube/program, referer: https://mail.example.com/ > > > On 03/12/2022 12:42, Bernardo Reino wrote: > > Hello, > > On 03/12/2022 11:33, Thomas Anderson wrote: > > My question is, how exactly would I got about this? I have not been able > to find any documentation on doing this. Will keep looking in the interim. > But if anyone can point me in the right direction, and what I should be > mindful of, and/or if I simply just install it over the old version, I > would be thankful? > > > Everything one needs to know can be found here: > https://github.com/roundcube/roundcubemail/blob/master/UPGRADING > > This has always worked quite well (in my case at least): > > unpack the archive of the new Roundcube version to a temporary location > (don't replace the Roundcube installation you want to update) > and cd into that directory. From there, run the following command in a > shell: ./bin/installto.sh > > Cheers. > ___ > Roundcube Users mailing list > users@lists.roundcube.net > http://lists.roundcube.net/mailman/listinfo/users > > > ___ > Roundcube Users mailing list > users@lists.roundcube.net > http://lists.roundcube.net/mailman/listinfo/users > > > -- > Mike Burger > http://www.bubbanfriends.org > > "It's always suicide-mission this, save-the-planet that. No one ever just > stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1 > ___ > Roundcube Users mailing list > users@lists.roundcube.net > http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
Gerardo Contreras skrev den 2022-12-06 16:27: Root should NOT own any directory that is publicly accessed, such as web content. Should there be a breach, then the visitor will have root access to the whole system. It is better if the directory is owned by the web server, and that depends on your platform. Have you checked other security mechanisms? Sometimes, for example, SELinux on RedHat is a big pain in the butt if you don't configure it properly. any files in tarball MUST be owned by Root, period. and all config.inc.php and default.inc.php included excepteions is ./logs ./temp in tarball patch, check .htaccess files in this dirs SELinux is not needed to be on if strong unix permisions is enforced ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
Root should NOT own any directory that is publicly accessed, such as web content. I don't know if this is worded wrong, or maybe English isn't your primary language, but this is the worst advice as-worded. You shouldn't run services as root, but yes, files and directories *should* be owned by root as much as possible. Should there be a breach, then the visitor will have root access to the whole system. Not true, if there is a breach they only get access to apache and files owned by apache, NOT the whole system. I think you have file ownership and service ran as confused. It is better if the directory is owned by the web server, and that depends on your platform. No. If there is a breach the attacker gets the permissions of the service they breached. If you give all of the directories and files the same user level as the service that was breached the attacker can now access / alter all of the files belonging to that breached service. This is why you want the files owned by root, so if apache gets breached, the attacker CAN NOT touch those files because they are owned by root NOT apache. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
Root should NOT own any directory that is publicly accessed, such as web content. Should there be a breach, then the visitor will have root access to the whole system. It is better if the directory is owned by the web server, and that depends on your platform. Have you checked other security mechanisms? Sometimes, for example, SELinux on RedHat is a big pain in the butt if you don't configure it properly. El 2022-12-06 09:15, Bernardo Reino escribió: On Tue, 6 Dec 2022, Mike Burger wrote: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. The web user (www-data) should NOT have write-access to everything. The whole tree should be owned by e.g. root, allowing read/execute access to everyone (so 644/0755). AFAIK only the db, logs and temp directories should be writable for the web user. At least this is how I have it, and I think it makes sense. Bernardo On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ On 03/12/2022 12:42, Bernardo Reino wrote: Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ Don't set the entire directory to the apache user. Any web exploit will allow an attacker to change the source files embedding things in your pages to then attack visitors to the site. Roundcube will work with files owned by root. You only need to give apache access to the temp directory. drwxr-xr-x 2 root root4096 Aug 5 13:25 bin drwxr-xr-x 2 root root4096 Aug 19 17:22 config -rw-r--r-- 1 root root 90022 Aug 5 21:56 favicon.ico -rw-r--r-- 1 root root 11214 Aug 28 16:11 index.php drwxr-xr-x 38 root root4096 Aug 6 19:00 plugins drwxr-xr-x 8 root root 94 Aug 5 13:25 program drwxr-xr-x 3 root root 83 Aug 5 13:25 public_html drwxr-xr-x 3 root root 21 Aug 5 13:25 skins drwxr-xr-x 2 apache apache23 Aug 23 20:12 temp drwxr-xr-x 14 root root4096 Aug 5 13:25 vendor I have no idea what symlink is trying to be created inside the program directory, if that is what that error is about. drwxr-xr-x 7 root root 76 Aug 5 13:25 actions drwxr-xr-x 2 root root 4096 Aug 11 12:27 include drwxr-xr-x 3 root root 4096 Aug 5 13:25 js drwxr-xr-x 3 root root 23 Aug 5 13:25 lib drwxr-xr-x 89 root root 4096 Jul 23 16:17 localization drwxr-xr-x 3 root root 128 Aug 5 13:25 resources Or is it complaining because your program directory is missing or denied by permission? Compare your directories and permissions to mine above to see if anything stands out. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
On Tue, 6 Dec 2022, Mike Burger wrote: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. The web user (www-data) should NOT have write-access to everything. The whole tree should be owned by e.g. root, allowing read/execute access to everyone (so 644/0755). AFAIK only the db, logs and temp directories should be writable for the web user. At least this is how I have it, and I think it makes sense. Bernardo On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ On 03/12/2022 12:42, Bernardo Reino wrote: Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ On 03/12/2022 12:42, Bernardo Reino wrote: Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users -- Mike Burger http://www.bubbanfriends.org "It's always suicide-mission this, save-the-planet that. No one ever just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or link target not accessible: /var/lib/roundcube/program, referer: https://mail.example.com/ On 03/12/2022 12:42, Bernardo Reino wrote: Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users
Re: [RCU] Updating RC
Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if I simply just install it over the old version, I would be thankful? Everything one needs to know can be found here: https://github.com/roundcube/roundcubemail/blob/master/UPGRADING This has always worked quite well (in my case at least): unpack the archive of the new Roundcube version to a temporary location (don't replace the Roundcube installation you want to update) and cd into that directory. From there, run the following command in a shell: ./bin/installto.sh Cheers. ___ Roundcube Users mailing list users@lists.roundcube.net http://lists.roundcube.net/mailman/listinfo/users