Re: [RCU] Updating RC

2022-12-17 Thread Sean McBride
I wonder if maybe you've hit this bug: https://github.com/roundcube/roundcubemail/issues/8642 Sean On 8 Dec 2022, at 4:33, Thomas Anderson wrote: Ok figured it out. In /etc/master.cf had to change tls_wrapper mode = no then it all worked. But, it killed my thunderbird client from being

Re: [RCU] Updating RC

2022-12-08 Thread Thomas Anderson
Ok figured it out. In /etc/master.cf had to change tls_wrapper mode = no then it all worked. But, it killed my thunderbird client from being able to send..hmmm On 08/12/2022 10:00, Thomas Anderson wrote: I also learned something =) I did change the directory permissions to root, and I was

Re: [RCU] Updating RC

2022-12-08 Thread Thomas Anderson
I also learned something =) I did change the directory permissions to root, and I was able to see emails in the client, am able to write emails, receive emails, logout, login, basically roundcube functions as I expect, minus I cannot SEND emails. Apparently, there is still not a permission or

Re: [RCU] Updating RC

2022-12-07 Thread Gerardo Contreras
And to all that have corrected me, thank you. I need to study up a bit more on security, I realize. El 2022-12-06 14:50, Benny Pedersen escribió: Gerardo Contreras skrev den 2022-12-06 16:27: Root should NOT own any directory that is publicly accessed, such as web content. Should there

Re: [RCU] Updating RC

2022-12-06 Thread Benny Pedersen
Mike Burger skrev den 2022-12-06 15:41: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. bad advise don't doit, if you belive "chown -R wepserver-user /"

Re: [RCU] Updating RC

2022-12-06 Thread Benny Pedersen
Roas Solutions skrev den 2022-12-06 23:10: I would not like to receive these emails anymoe anyone a suggestion how i can fix this? http://lists.roundcube.net/mailman/listinfo/users type your email address into unsubscribe, press the button, and confirm in mail received, done

Re: [RCU] Updating RC

2022-12-06 Thread Roas Solutions
I would not like to receive these emails anymoe anyone a suggestion how i can fix this? On Tue, 6 Dec 2022, 16:00 Mike Burger, wrote: > I suggest chown'ing the entire Roundcube directory structure to be owned > by your web server user (apache?), since your web server doesn't (or, at > least,

Re: [RCU] Updating RC

2022-12-06 Thread Benny Pedersen
Gerardo Contreras skrev den 2022-12-06 16:27: Root should NOT own any directory that is publicly accessed, such as web content. Should there be a breach, then the visitor will have root access to the whole system. It is better if the directory is owned by the web server, and that depends on your

Re: [RCU] Updating RC

2022-12-06 Thread list
Root should NOT own any directory that is publicly accessed, such as web content. I don't know if this is worded wrong, or maybe English isn't your primary language, but this is the worst advice as-worded. You shouldn't run services as root, but yes, files and directories *should* be owned

Re: [RCU] Updating RC

2022-12-06 Thread Gerardo Contreras
Root should NOT own any directory that is publicly accessed, such as web content. Should there be a breach, then the visitor will have root access to the whole system. It is better if the directory is owned by the web server, and that depends on your platform. Have you checked other

Re: [RCU] Updating RC

2022-12-06 Thread list
I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or

Re: [RCU] Updating RC

2022-12-06 Thread Bernardo Reino
On Tue, 6 Dec 2022, Mike Burger wrote: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. The web user (www-data) should NOT have write-access to

Re: [RCU] Updating RC

2022-12-06 Thread Mike Burger
I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been

Re: [RCU] Updating RC

2022-12-06 Thread Thomas Anderson
thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or,

Re: [RCU] Updating RC

2022-12-03 Thread Bernardo Reino
Hello, On 03/12/2022 11:33, Thomas Anderson wrote: My question is, how exactly would I got about this? I have not been able to find any documentation on doing this. Will keep looking in the interim. But if anyone can point me in the right direction, and what I should be mindful of, and/or if