gmane.mail.squirrelmail.user

Re: server used as spammer

Paul Lesniewski — 2010-03-11T18:45:02

KAM, please do not top post.  Please review the mailing list posting guidelines.


<snip>


Or just enforce strong password rules in your password change backend.


Or just turn off the ability of users to change their email address in
SquirrelMail.  However, I don't think the spammer would care too much
if they had to send directly from the compromised user's email
address.  Instead, I'd recommend getting some throttle controls
installed in your MTA, or if SquirrelMail is the only way to access
the account (no direct access to SMTP), then you can install the
Squirrel Logger plugin which warns you of this situation, or Restrict
Senders which can detect this activity and deactivate the account
immediately (automatically).  You should also have the Lockout and/or
CAPTCHA plugins installed if you think the password guess happened by
using the SquirrelMail login page.

Please search before asking -- these questions have come up numerous
times before.

Re: server used as spammer

Kevin A. McGrail — 2010-03-11T13:47:06

Jerry,

Some quick hints:

Security Issue:

A) stay more up to date on squirrelmail packages.  That package has 
known exploits.

B) use  randomly generated passwords.  For example, this site came up 
from a quick Google search: http://www.thebitmill.com/tools/password.html

Auth Warning:

C) To allow the apache user to send emails using -f (essentially forging 
the name) without a warning, add this to your sendmail.mc and compile 
the cf.

define(`confTRUSTED_USERS', `apache') dnl

There is also a way to use a file called /etc/mail/trusted-users for 
example that can contain trusted users depending on your installation.

Regards,
KAM

On 3/11/2010 7:24 AM, Jerry Mersel wrote:


------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/in

server used as spammer

Jerry Mersel — 2010-03-11T12:24:57

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users< at >lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: Unread Message Count Inaccurate

Karl Pearson — 2010-03-10T21:08:06



On Wed, March 10, 2010 2:56 am, Tomas Kuliavas wrote:

Thanks Tomas. I'll do some work at the Dovecot level and see if something
I'm doing in its setup has caused this.

Karl



---
Karl Pearson
Karlp< at >ourldsfamily.com
Owner/Administrator of the sites at
http://ourldsfamily.com
---
"To mess up your Linux PC, you have to really work at it;
 to mess up a microsoft PC you just have to work on it."
---
 Democracy is two wolves and a lamb voting on what to have
 for lunch. Liberty is a well-armed lamb contesting the vote.
 --Benjamin Franklin
---
 Children seldom misquote you. In fact, they usually
 repeat word for word what you shouldn't have said.
---


------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
-----
squirrelma

Re: Sorting "To" field in Sent Item

Paul Lesniewski — 2010-03-10T16:50:59

Complete instructions:

  Upgrade to SquirrelMail 1.4.20, where this works as intended.

  Version 1.4.4 is many years old and contains numerous published
security holes.

Re: squirrelmail.conf

michael crane — 2010-03-10T16:44:45


Dohh! no mod_ssl installed

cheers

mick

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users< at >lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: squirrelmail.conf

Michal Hlavinka — 2010-03-10T16:12:02

this looks like squirrelmail.conf from Fedora package

the rewrite rule there is to force ssl connection by default - protection for 
using plain password without encrypted connection

you can
a)comment out that rewrite rule if you don't want to use ssl encryption
b)install mod_ssl module and restart httpd if you want to use ssl

Michal


------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users< at >lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

squirrelmail.conf

michael crane — 2010-03-10T15:18:24

hello,
out of interest really I've installed squirrelmail and dovecot at home.
I couldn't connect until I changed squirrelmail.conf
---
#<Directory /usr/share/squirrelmail>
#  RewriteEngine  on
#  RewriteCond    %{HTTPS} !=on
#  RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
#</Directory>

<Directory "/usr/share/squirrelmail/plugins/squirrelspell/modules">
 Deny from all
</Directory>

<Directory /usr/share/squirrelmail>
order deny,allow
deny from all
allow from xxxxxxxx
</directory>
---
I guess I haven't setup ssl  ?
what do these Rewrite lines do ?

cheers

Mick

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
L

Sorting "To" field in Sent Item

Bumo — 2010-03-10T15:03:37

Hi all, using squirrelmail 1.4.4 in a linux redhat ES 4

I tryed to use the istruction of Pete Horn (Sort by 'TO' fails in Sent folder)
 http://sourceforge.net/tracker/index.php?func=detail&aid=2907412&group_id=311&atid=100311

checking if applying changes also in my squirrelmail it could works.

but I didn't understand the last action I have to do:

"This uses the argument '$mailbox' so this needs including in the function
declaration and in argument lists for the two functions that call
'calc_msort()', These are 'showMessagesForMailbox()' also in
/functions/mailbox_display.php and 'printSearchMessages()' in
/src/search.php"

Please can you tell me how to complete instructions?

Thank you very much,
Leo.



      

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high mar

Re: Unread Message Count Inaccurate

Tomas Kuliavas — 2010-03-10T09:56:30


Karl Pearson wrote:

email client can mark message as read/unread by executing some command or
imap server marks message as read when client reads message body. IMAP
server has read/unread and recent counters. Recent counter is controlled
only by IMAP server.

Run IMAP STATUS command on all folders.
----
telnet your-imap-server 143
- some greeting
A01 login your-username your-password
- some OK response
A02 STATUS INBOX (MESSAGES RECENT UNSEEN)
- some response
A03 STATUS other-mailbox (MESSAGES RECENT UNSEEN)
- some response
- and so on for every mailbox. count numbers in all responses.
A04 LOGOUT
----

There were reports about invalid message counts on SquirrelMail mailing
lists, but reporter failed to provide enough information about his issue.
Developers can't debug your problem, if they don't know all newmail plugin
user settings and IMAP STATUS responses for all folders.

mbstring.func_overload = 7 causes multiple warnings from , , /template/Template.class.php & general_util.php

David C. Rankin — 2010-03-10T01:12:43

Paul,

I don't know if this has been discussed before or if I'm the first one to be
dumb enough to do it, but setting mbstring.func_overload = 7 in php.ini causes
LOTS of notice messages from Template.class.php and general_util.php. (See below)

The mbstring.func_overload = 7 is required by several apps (eGroupWare, etc..)
for true UTF-8 compatibility, or so they say. I haven't found a way around it
yet. For some reason squirrelmail is getting "(null)" encoding with the mbstring
value at 7. I've dropped back to 0 for now.

This is will squirrelmail 1.5-svn with the latest updates applied. Let me know
if I can send something else. Keep up the great work!


SquirrelMail notice messages
Category: PHP
Message: mb_strtolower() [http://www.php.net/function.mb-strtolower]: Unknown
encoding "(null)"
FILE: /srv/http/htdocs/squirrelmail/class/template/Template.class.php
LINE: 1310
Category: PHP
Message: mb_strtolower() [http://www.php.net/function.mb-strtolower]: Unknown
encoding "(null)"
FILE: /srv/http/htd

Re: mbstring.func_overload = 7 causes multiple warningsfrom , , /template/Template.class.php & general_util.php

Paul Lesniewski — 2010-03-10T04:00:03

On Tue, Mar 9, 2010 at 5:12 PM, David C. Rankin
<drankinatty< at >suddenlinkmail.com> wrote:

Only because they are lazy.


Make sure to access src/configtest.php when you have any problems.  As
it says, you should have it set to 0 for SquirrelMail so when it uses
string functions it can reliably know exactly what functions it is
using.  Even the PHP manual recommends setting mbstring.func_overload
on a per-directory basis ( http://php.net/manual/mbstring.overload.php
), which is exactly what you should do.

Cheers,

  Paul

Unread Message Count Inaccurate

Karl Pearson — 2010-03-10T05:53:05

I've posted the question before about why my unread email count is wrong
with Squirrelmail, but I think I've figured something out, though how to
fix it is still a mystery.

It's this: I use Alpine (formerly just Pine) from the University of
Washington because I use a text interface a lot. No one else on my server
does that, and I'm the only one with the unread count messed up.

If I do a search in SQM in All Folders, the count comes somewhat closer to
being accurate, but slowly creeps up.

I can go through all my folders and check for unread emails and mark them
read (because they are, or because Alpine puts a copy in the folder I
choose, but doesn't mark it 'read' like SQM does), which alters the count,
but it continues to move up over time.

Though all my email is read now, SQM reports 84 unread in all folders, but
if I look in all the folders, there aren't any unread.

My question then is this:

Is there an absolute standard for how an email client marks a message
'read' and if so, who isn't following it

Bug Report

Greg Spence Wolf — 2010-03-08T03:43:16

My email is out of order
It isn't displaying according to dates


I subscribe to the squirrelmail-users mailing list.
  [ ]  True - No need to CC me when replying
  [ ]  False - Please CC me when replying

This bug occurs when I ...
  ... view a particular message
  ... use a specific plugin/function
  ... try to do/view/use ....



The description of the bug:


I can reproduce the bug by:


(Optional) I got bored and found the bug occurs in:


(Optional) I got really bored and here's a fix:


----------------------------------------------

My browser information:
  Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_2; en-US)
AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.307.11 Safari/532.9

My web server information:
  PHP Version 4.4.9
  PHP Extensions (List)
    * 0 = zip
    * 1 = xml
    * 2 = tokenizer
    * 3 = standard
    * 4 = sockets
    * 5 = session
    * 6 = posix
    * 7 = overload
    * 8 = mime_magic
    * 9 = mhash
    * 10 = mcrypt
    * 11 = mbstring
    * 12 = gettext
    * 13 = gd
    *

missing emails

John Glynn — 2010-03-06T16:01:06

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users< at >lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

missing emails

John Glynn — 2010-03-06T15:42:58

This problem seems to be happening prior to squirrel mail but I cannot be
certain.  My clients are each reporting missing emails. These are emails
they are expecting to receive from senders they have received from in the
past. They are now unable to receive any emails from these particular
senders. When I search the log files for those emails I find successful
entries like this one:

From: Mar 5 13:26:27 mail sendmail[11408]: o25IQQCM011408:
from=<thetrusted_sender< at >thesenders_domain.com>, size=4515, class=0,
nrcpts=1, msgid=< longID_number< at >thesenders_domain.com >, proto=ESMTP,
daemon=MTA, relay=hfdmailout01.thehartford.com [162.136.189.233]

To: Mar 5 13:26:33 mail sendmail[11409]: o25IQQCM011408:
to=<myclient< at >myclients_domain.com>, delay=00:00:06, xdelay=00:00:06,
mailer=local, pri=34790, dsn=2.0.0, stat=Sent

But I find no trace of any of the missing emails in Squirrelmail or even
looking through client emails within Webmin.

This is a new problem.

Where can I look for these emails? Is there some place wi

Re: missing emails

Paul Lesniewski — 2010-03-06T20:56:42

Sure, yes, but you just did it again here.  Please respond in-line if
you would.  Thanks.

Re: missing emails

John Glynn — 2010-03-06T20:24:58

Paul,

Thank you for your response and your guidance.  I have re-read the mailing
list guidelines again.  I think I am clear.  When you said " In particular,
note that top-posting is not how you should respond to messages here."  Were
you referring to my response to Bill Mussatto (original thread by Benedict
Simon, Subject: "query regarding SMS")?

Thank you again.

John Glynn



-----Original Message-----
From: Paul Lesniewski [mailto:paul< at >squirrelmail.org] 
Sent: Saturday, March 06, 2010 2:01 PM
To: Squirrelmail User Support Mailing List
Subject: Re: [SM-USERS] missing emails

On Sat, Mar 6, 2010 at 8:01 AM, John Glynn <john< at >leadminepond.com> wrote:

No, that prefix is added automatically for you.  Please re-read the
mailing list posting guidelines before posting again to re-familiarize
yourself with mailing list protocol.  In particular, note that
top-posting is not how you should respond to messages here.


SquirrelMail is an IMAP *client*.  It is NOT a mail server (MTA).
This issue is entirely unrelated

Re: query regarding SMS

John Glynn — 2010-03-06T15:31:31

Bill,

While this article deals with coldfusion's solution to your problem it does
offer some clever ideas:
http://www.bennadel.com/blog/692-Sending-Text-Messages-SMS-With-ColdFusion-A
nd-CFMail.htm 
I hope this helps.

John


-----Original Message-----
From: Wm Mussatto [mailto:mussatto< at >csz.com] 
Sent: Thursday, March 04, 2010 1:51 PM
To: squirrelmail-users< at >lists.sourceforge.net
Subject: Re: [SM-USERS] query regarding SMS

On Wed, March 3, 2010 22:25, Tomas Kuliavas wrote:
While I haven't done this with SM. Both AT&T and Verizon have email
addresses equivalent to their SMS phone numbers.  Works fine, in that
header's are stripped off.  Trust me, my phone is REAL basic. You can
reply back from the phone.   Of course it emails longer than the SMS
character limit get broken up.  Use it to replace a text pager.  Trick is
to find what their gateway is.

May not be what the originator wanted, but it does work.

Bill Mussatto
http://www.csz.com


--------------------------------------------------------------------

Re: missing emails

Paul Lesniewski — 2010-03-06T19:01:01

No, that prefix is added automatically for you.  Please re-read the
mailing list posting guidelines before posting again to re-familiarize
yourself with mailing list protocol.  In particular, note that
top-posting is not how you should respond to messages here.


SquirrelMail is an IMAP *client*.  It is NOT a mail server (MTA).
This issue is entirely unrelated to SquirrelMail.


When you ask this question in a more relevant place (such as a
sendmail forum), you'll want to show ALL the log entries for when such
a message came in to your server.  The only one you show above looks
like the mail was relayed to a server I don't know if you control.  If
you do, check there for the same message.  You should also show a set
of log entries for a message that was accepted normally.  You should
also work with one of the senders in question, asking them for EXACT
send times and whether or not they got a bounce message.  Also ensure
there is no filtering on the recipient's side that would trash the
mail and/or that some

Re: query regarding SMS

Wm Mussatto — 2010-03-04T18:50:58

While I haven't done this with SM. Both AT&T and Verizon have email
addresses equivalent to their SMS phone numbers.  Works fine, in that
header's are stripped off.  Trust me, my phone is REAL basic. You can
reply back from the phone.   Of course it emails longer than the SMS
character limit get broken up.  Use it to replace a text pager.  Trick is
to find what their gateway is.

May not be what the originator wanted, but it does work.

Bill Mussatto
http://www.csz.com


------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users< at >lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mai