omail-devel Mailing List for oMail (Page 11)
Brought to you by:
swix
You can subscribe to this list here.
2000 |
Jan
|
Feb
|
Mar
(37) |
Apr
(9) |
May
(3) |
Jun
(17) |
Jul
(4) |
Aug
(37) |
Sep
(51) |
Oct
(16) |
Nov
(40) |
Dec
(17) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2001 |
Jan
(61) |
Feb
(28) |
Mar
(16) |
Apr
(105) |
May
(40) |
Jun
(22) |
Jul
(11) |
Aug
(26) |
Sep
(4) |
Oct
(12) |
Nov
(7) |
Dec
(13) |
2002 |
Jan
(17) |
Feb
(31) |
Mar
(30) |
Apr
(3) |
May
(7) |
Jun
(3) |
Jul
(6) |
Aug
(1) |
Sep
(2) |
Oct
(3) |
Nov
(1) |
Dec
(7) |
2003 |
Jan
(3) |
Feb
(5) |
Mar
(11) |
Apr
(13) |
May
(34) |
Jun
(22) |
Jul
(1) |
Aug
(19) |
Sep
(8) |
Oct
(5) |
Nov
(5) |
Dec
(2) |
2004 |
Jan
(4) |
Feb
(13) |
Mar
(11) |
Apr
(4) |
May
(10) |
Jun
(2) |
Jul
(3) |
Aug
(3) |
Sep
(1) |
Oct
|
Nov
|
Dec
(1) |
2005 |
Jan
(1) |
Feb
|
Mar
(1) |
Apr
(4) |
May
(3) |
Jun
(3) |
Jul
(2) |
Aug
(2) |
Sep
(7) |
Oct
(3) |
Nov
(1) |
Dec
(1) |
2006 |
Jan
(5) |
Feb
(2) |
Mar
(9) |
Apr
(2) |
May
(4) |
Jun
(20) |
Jul
(5) |
Aug
(3) |
Sep
(4) |
Oct
(28) |
Nov
(16) |
Dec
(12) |
2007 |
Jan
(34) |
Feb
(14) |
Mar
(3) |
Apr
(8) |
May
(7) |
Jun
(5) |
Jul
(9) |
Aug
(12) |
Sep
(6) |
Oct
(2) |
Nov
(6) |
Dec
(3) |
2008 |
Jan
(8) |
Feb
(2) |
Mar
(6) |
Apr
(11) |
May
(12) |
Jun
(12) |
Jul
(29) |
Aug
(9) |
Sep
(24) |
Oct
(14) |
Nov
(23) |
Dec
(34) |
2009 |
Jan
(8) |
Feb
(13) |
Mar
(15) |
Apr
(16) |
May
(42) |
Jun
(21) |
Jul
(34) |
Aug
(7) |
Sep
(3) |
Oct
|
Nov
|
Dec
(4) |
2010 |
Jan
(10) |
Feb
(6) |
Mar
(2) |
Apr
(37) |
May
(63) |
Jun
(63) |
Jul
(42) |
Aug
(49) |
Sep
(21) |
Oct
|
Nov
|
Dec
|
2014 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: Carter S. <der...@de...> - 2004-05-12 05:49:20
|
The only issue that I can think of right now is that omail-webmail runs under Apache. It looks like tcpperl would want to deal with its own TCP server. However, I think there's an apache module that precompiles perl code into some sort of bytecode to speed things up. http://www.apacheref.com/ref/mod_perl.html On Sat, 2004-04-10 at 17:35, Joan Picanyol wrote: > Hi, > > I'm attaching the file I've been using for long but never gotten around > to send :o The "omail-webmail: what next?" thread I saw in the archives > urged me to complete it at once. > > Please take this as encouragement for keeping on with omail-webmail; > I've been using it for long and it's my current solution for any > low-weight deployment webmail+vmailmgr+cgiuser-httpd (which makes me > less sensitive to potential security holes). The only drawback I suffer > is the long time needed for every Perl invocation in some old 150MHz > Pentium's: > > lulu@hobbes:~/service/webmail/log/main(0)$ grep -E '(ok|end)' > \@400000004071138535561744.u | tail | cut -d ' ' -f 1-4 | sort -n +3 | > tai64nlocal > 2004-04-03 05:04:55.601364500 tcpserver: ok 17162 > 2004-04-03 05:05:00.926687500 tcpserver: end 17162 > 2004-04-03 05:04:57.135036500 tcpserver: ok 17163 > 2004-04-03 05:05:02.108374500 tcpserver: end 17163 > 2004-04-03 05:05:02.713488500 tcpserver: ok 17167 > 2004-04-03 05:05:08.652695500 tcpserver: end 17167 > 2004-04-03 05:05:04.047915500 tcpserver: ok 17168 > 2004-04-03 05:05:09.228655500 tcpserver: end 17168 > 2004-04-03 05:05:10.560137500 tcpserver: ok 17169 > 2004-04-03 05:05:13.784044500 tcpserver: end 17169 > > This show me that it takes about 5 seconds for this computer to process > every request, which is a tad to slow nowadays as a web response time. > One thing I would like to try is to deploy it as a preforking server > with tcpperl from http://www.superscript.com/ucspi-tcphandle/intro.html > > I don't speak Perl, but could you tell me if it's possible for > omail-webmail to work with tcpperl? For convinience, here's an excerpt > from that URI: > > tcpperl forks the requested number of children, each listening > for TCP client connections. Before handling any requests, each > child parses and runs the perl code in file. The file should end > with a true expression, like a module. > > To handle a request, a child process executes prog as a perl > subroutine, with file descriptor 0 reading from the network and > file descriptor 1 writing to the network. Before handling the > request, the child sets certain environment variables, a la > tcpserver. > > Each invocation of prog handles a single request. It is called > within a loop, with one iteration per request, and therefore > must release any resources allocated to handle a particular > request. > > If prog exits while handling a request, tcpperl will start a new > child process. > > If you decide to stop developing omail-webmail please take this a final > request... > > many thanks |
From: Carter S. <der...@de...> - 2004-05-12 05:41:58
|
I don't have a webmail 1 working on my server atm (so I haven't tested this fully), but what about a fix like this? Here's another option.. What about doing an open AUTH, "| vauthenticate" or die "...."; print AUTH $domainname .'\x00'; print AUTH $username .'\x00'; print AUTH $password .'\x00'; $output = <AUTH>; close AUTH; Would that work? On Fri, 2004-05-07 at 11:21, Mikkel Holm Olsen wrote: > On Fri, May 07, 2004 at 05:02:54PM +0200, Olivier Mueller wrote: > > FYI, a patch would be required, but I have absolutely no time > > to work on that the next hours. Carter, would you have some? > > > > fix it by replacing the regex around line 411 to something like > > $password = quotemeta($password); > > It seems like this is not the best way to fix the problem, since all > users with special characters in their password will no longer be able > to log in. > > Another fix is to change the call to echo and vauthenticate arround line > 690, by replasing the two " with \'. But this still allows one to > include things as $(touch /tmp/test), although it will now need to be in > single quotes as well. But perhaps this could be combined with removing > '-characters from the password. > |
From: Mikkel H. O. <sf...@sy...> - 2004-05-07 18:17:49
|
On Fri, May 07, 2004 at 05:02:54PM +0200, Olivier Mueller wrote: > FYI, a patch would be required, but I have absolutely no time > to work on that the next hours. Carter, would you have some? > > fix it by replacing the regex around line 411 to something like > $password = quotemeta($password); It seems like this is not the best way to fix the problem, since all users with special characters in their password will no longer be able to log in. Another fix is to change the call to echo and vauthenticate arround line 690, by replasing the two " with \'. But this still allows one to include things as $(touch /tmp/test), although it will now need to be in single quotes as well. But perhaps this could be combined with removing '-characters from the password. -- Mikkel Holm Olsen AKA Spaceman Spiff Denmark Spring is God's way of saying, One more time! |
From: Olivier M. <om-...@om...> - 2004-05-07 15:03:00
|
FYI, a patch would be required, but I have absolutely no time to work on that the next hours. Carter, would you have some? regards, Olivier -------- Forwarded Message -------- From: Thijs Dalhuijsen <th...@da...> To: om...@om... Cc: ful...@li..., bu...@se... Subject: remote root exec vulnerability in omail Date: Tue, 04 May 2004 19:10:00 +0200 Mailer: Microsoft-Entourage/10.0.0.1309 product:omail webmail version: 0.98.5 notified: now the "patch" on omail.pl still leaves the system wide open for attack, the regex to filter out " and ' doesn't help you much if your $SHELL is bash or something similar both back ticks and more arcane ways of shell expansion $(rm -rf /) are still possible fix it by replacing the regex around line 411 to something like $password = quotemeta($password); Happy patching, Thijs -- map{map{tr|10|# |;print}split//,sprintf"%.8b\n",$_} unpack'C*',unpack'u*',"5`#8<3'X`'#8^-@`<-CPP`#8V/C8`" |
From: Alessio C. <ale...@ar...> - 2004-05-04 22:27:51
|
Hye my omail on freebsd won't work :( i have a "500 Internal Server Error" webmail_error.log [Wed May 5 00:05:48 2004] [error] [client 62.10.137.100] Premature end of script headers: /usr/local/www/cgi-bin/webmail/omail.pl We trust you have received the usual lecture from the local System Administrator. It usually boils down to these two things: #1) Respect the privacy of others. #2) Think before you type. Password: [Wed May 5 00:06:31 2004] [error] [client 62.10.137.100] Premature end of script headers: /usr/local/www/cgi-bin/webmail/omail.pl suexec.log [2004-05-05 00:07:06]: info: (target/actual) uid: (webmail/webmail) gid: (webmail/webmail) cmd: omail.pl [2004-05-05 00:10:36]: info: (target/actual) uid: (webmail/webmail) gid: (webmail/webmail) cmd: omail.pl [2004-05-05 00:11:03]: info: (target/actual) uid: (webmail/webmail) gid: (webmail/webmail) cmd: omail.pl omail.log = 0 my sudoers: root ALL=(ALL) ALL User_Alias WEBSERVERUSER = webmail Runas_Alias VPOPMAIL = vpopmail Cmnd_Alias OMAIL = /usr/bin/perl /usr/local/www/cgi-bin/webmail/omail.pl, \ /usr/bin/perl /usr/local/www/cgi-bin/webmail/omail-prefs.pl WEBSERVERUSER ALL = (VPOPMAIL) NOPASSWD: OMAIL Apache run ny www but VHOST run by webmail. Why sudo ask the password? |
From: Alessio C. <ale...@io...> - 2004-05-04 22:24:10
|
Hye my omail on freebsd won't work :( i have a "500 Internal Server Error" webmail_error.log [Wed May 5 00:05:48 2004] [error] [client 62.10.137.100] Premature end of script headers: /usr/local/www/cgi-bin/webmail/omail.pl We trust you have received the usual lecture from the local System Administrator. It usually boils down to these two things: #1) Respect the privacy of others. #2) Think before you type. Password: [Wed May 5 00:06:31 2004] [error] [client 62.10.137.100] Premature end of script headers: /usr/local/www/cgi-bin/webmail/omail.pl suexec.log [2004-05-05 00:07:06]: info: (target/actual) uid: (webmail/webmail) gid: (webmail/webmail) cmd: omail.pl [2004-05-05 00:10:36]: info: (target/actual) uid: (webmail/webmail) gid: (webmail/webmail) cmd: omail.pl [2004-05-05 00:11:03]: info: (target/actual) uid: (webmail/webmail) gid: (webmail/webmail) cmd: omail.pl omail.log = 0 my sudoers: root ALL=(ALL) ALL User_Alias WEBSERVERUSER = webmail Runas_Alias VPOPMAIL = vpopmail Cmnd_Alias OMAIL = /usr/bin/perl /usr/local/www/cgi-bin/webmail/omail.pl, \ /usr/bin/perl /usr/local/www/cgi-bin/webmail/omail-prefs.pl WEBSERVERUSER ALL = (VPOPMAIL) NOPASSWD: OMAIL Apache run ny www but VHOST run by webmail. Why sudo ask the password? |
From: Alejandro M. <am...@ge...> - 2004-04-16 22:26:23
|
Hi, i have had problems with omail-webmail (apache2/perl5.8) due to taint mode. e.g. Insecure dependency in system while running with -T switch at omail.pl line 3458. using CVS of today. what's the right way to solve this? fixing omail? updating modperl? updating perl? fixing my enviroment? etc... any advice is very welcomed best regards, Alejandro Mery |
From: Alejandro M. <am...@ge...> - 2004-04-16 22:23:13
|
Hi, i have had problems with omail-webmail (apache2/perl5.8) due to taint mode. e.g. Insecure dependency in system while running with -T switch at omail.pl line 3458. using CVS of today. what's the right way to solve this? fixing omail? updating modperl? updating perl? fixing my enviroment? etc... any advice is very welcomed best regards, Alejandro Mery |
From: Joan P. <lis...@bi...> - 2004-04-11 00:36:52
|
Hi, I'm attaching the file I've been using for long but never gotten around to send :o The "omail-webmail: what next?" thread I saw in the archives urged me to complete it at once. Please take this as encouragement for keeping on with omail-webmail; I've been using it for long and it's my current solution for any low-weight deployment webmail+vmailmgr+cgiuser-httpd (which makes me less sensitive to potential security holes). The only drawback I suffer is the long time needed for every Perl invocation in some old 150MHz Pentium's: lulu@hobbes:~/service/webmail/log/main(0)$ grep -E '(ok|end)' \@400000004071138535561744.u | tail | cut -d ' ' -f 1-4 | sort -n +3 | tai64nlocal 2004-04-03 05:04:55.601364500 tcpserver: ok 17162 2004-04-03 05:05:00.926687500 tcpserver: end 17162 2004-04-03 05:04:57.135036500 tcpserver: ok 17163 2004-04-03 05:05:02.108374500 tcpserver: end 17163 2004-04-03 05:05:02.713488500 tcpserver: ok 17167 2004-04-03 05:05:08.652695500 tcpserver: end 17167 2004-04-03 05:05:04.047915500 tcpserver: ok 17168 2004-04-03 05:05:09.228655500 tcpserver: end 17168 2004-04-03 05:05:10.560137500 tcpserver: ok 17169 2004-04-03 05:05:13.784044500 tcpserver: end 17169 This show me that it takes about 5 seconds for this computer to process every request, which is a tad to slow nowadays as a web response time. One thing I would like to try is to deploy it as a preforking server with tcpperl from http://www.superscript.com/ucspi-tcphandle/intro.html I don't speak Perl, but could you tell me if it's possible for omail-webmail to work with tcpperl? For convinience, here's an excerpt from that URI: tcpperl forks the requested number of children, each listening for TCP client connections. Before handling any requests, each child parses and runs the perl code in file. The file should end with a true expression, like a module. To handle a request, a child process executes prog as a perl subroutine, with file descriptor 0 reading from the network and file descriptor 1 writing to the network. Before handling the request, the child sets certain environment variables, a la tcpserver. Each invocation of prog handles a single request. It is called within a loop, with one iteration per request, and therefore must release any resources allocated to handle a particular request. If prog exits while handling a request, tcpperl will start a new child process. If you decide to stop developing omail-webmail please take this a final request... many thanks -- pica |
From: Carter S. <der...@de...> - 2004-04-03 19:15:07
|
At the moment, there are no patches to provide folder creation. Carter On Mon, 2004-03-29 at 01:59, Timh Bergström wrote: > Hi there! > > I have noticed that in oMail Webmail you cannot create folders, at least i can't find how to. Is there any patch or successfull deployment of folders in the webmail interface? > > Second, in oMail Admin, there's a entry called "fixme_and_update_cvs", what's that for? Is that a todo-entry? > > Best regards, > Timh |
From: <lis...@az...> - 2004-03-29 09:58:19
|
Hi there! I have noticed that in oMail Webmail you cannot create folders, at least = i can't find how to. Is there any patch or successfull deployment of = folders in the webmail interface?=20 Second, in oMail Admin, there's a entry called "fixme_and_update_cvs", = what's that for? Is that a todo-entry?=20 Best regards, Timh |
From: Hans-Chr. J. <hc...@je...> - 2004-03-21 16:34:37
|
Hello, bonjour Olivier I have approx. 70 users running on omail-webmail, all being satisfied wit= h it. It serves it's purposes very well. I have been experimenting with an IMAP server, mainly for giving access t= o my users through IMAP from e.g. Outlook and such (I have installed binc-i= map and it seems to work very well). Up comes the question of putting a web interface for IMAP on the computer= . Why? To gain the folders functionallity along with storing the mail on th= e server when accessing from the web. I will also admit that I have been looking (a little) at squirrelmail for this purpose. If You decide to concentrate on other things in your life (projects among= st others :-) I do understand and it is not like we're left without alternatives. I do also agree with you on the other issues You've brought up, except the one about omail-webmail being difficult to install :-) I will probably keep omail-webmail running for quite a while (If it aint broke, dont fix it :-), but looking for alternatives might be an activity for the future :-) I run a setup with qmail, vmailmgr, omail-admin, ospam, spamassassin, binc-imap and omail-webmail. It all works well together. I have been very happy with omail-admin (I hope very much that you will continue development on this), since it has allowed me to run 20 domains, without having to mess with the day to day issues. The users and their administrators do all this them selves. I have also been very happy with ospam so far. I'm running 0.01, and it works :-) The most dificult thing was to get spamassassin to work with the database= , from there on it was fairly easy :-) I am unfortunately not in a position to takeover the project my self, or even to contribute to the project. I'm just a user :-) Anyway - Thanx for all the time you've put in. Hopefully you've got a lot= of experience and FUN out of it. Best regards and deep respect Hans-Chr. Jehg ----- Original Message -----=20 From: "Olivier Mueller" <om-...@om...> To: "omail-devel" <oma...@li...>; "omail-news" <oma...@li...> Sent: Wednesday, March 17, 2004 10:00 PM Subject: [Omail-news] omail-webmail: what next? > Hello, bonjour! > > Since a few months I'm wondering what to do with the > omail-webmail project: should it be continued or > stopped? This is what I'd like to ask you (the =3D~ 200 > people one these lists). > > The main concern I had 4 years ago, when I started > omail-webmail (forked from the Neomail project) was speed > & performance (& fun :) : it was then the case with direct > Maildir access compared to complex access via imap. > Openwebmail continued on this way for "mbox-based" accounts > (www.openwebmail.org), with many nice features, while > omail-webmail stayed a bit behind: there are many > features missing, especially folders support and > decoding of base64-encoded mails to name just two of them. > > But omail-webmail is now old and IMHO not secure > enough for "serious" hosting (it even came on bugtraq last year: > http://www.securityfocus.com/archive/1/334056 and there > are probably other security issues): I belive that > running a suidperl based CGI is not the best solution > nowadays. Other problem: the installation is still quite > complex (check the ML archive :). > > > Today it's easier to setup qmail + vmailmgr + courier-imap > and an imap-based webmail like squirrelmail than the > same with omail-webmail, there are even automated tools to > do that (cf freshmeat). And it's safer for the server too: > no more suidperl, and PHP is quite standard now too. > I remember that it wasn't the case 3-4 years ago, with > IMP/horde setup and uw-imapd libraries, etc. > > So the question is: what next? :-) Are there still > people/servers using omail-webmail? > > > >From a personal point of view, I think I'd rather concentrate > on other open source projects (omail-admin, ospam: spam > fighing add-on for qmail+vmailmgr, and phpmyadmin) than > spending more time on omail-webmail, trying to reinvent the > wheel and implement weird things (MIME support, attachments > decoding, folders support etc) which are already nicely > programmed elsewhere (squirrel, IMP, etc.). Or are > there people around willing to continue de developement > of omail-webmail? > > > All my customers are still using omail-webmail, so > in any case I will have to find a solution anyway :). Now > I'm thinking about an automated transition to > squirrelmail, with scripts to (server-wide) convert > omail's pseudo folders to courier-imap compatible IMAP > folders, and if possible do the same with the addressbook. > Maybe you even already coded something like that? > > > Feedback welcome! It was fun working with you :-) > > Regards, > Olivier > --=20 > _______________________________________________________ > Olivier M=FCller - PGP key ID: 0x0E84D2EA - Switzerland > E-Mail: http://omx.ch/mail/ - AIM/iChat: swix3k > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: IBM Linux Tutorials > Free Linux tutorial presented by Daniel Robbins, President and CEO of > GenToo technologies. Learn everything from fundamentals to system > administration.http://ads.osdn.com/?ad_id=3D1470&alloc_id=3D3638&op=3Dc= lick > _______________________________________________ > Omail-news mailing list > Oma...@li... > https://lists.sourceforge.net/lists/listinfo/omail-news > |
From: Olivier M. <om-...@om...> - 2004-03-18 23:39:27
|
Thanks for your feedback (and work btw!) Carter, On Wed, 2004-03-17 at 23:02 -0800, Carter Smithhart wrote: > I'd just like to point out that one of the special features that > omail-webmail has that other webmail packages don't seem to have is the > sheer number of translations. yes, getting the translations was really motivating :) But Squirrel and IMP both have many translations too: http://www.squirrelmail.org/about.php or http://www.horde.org/imp/about/ > Here are a few ideas that I've had which may or may not revitalize the > project: > - Implement omail-webmail using Template Toolkit (bugzilla uses it) to > allow easier separation of code and UI. This allows a non-programmer to > modify the UI without having to change the logic that drives the app. > - Rewrite omail-webmail using the perl MailTool library. This would > allow omail-webmail to access imap, pop3, maildir, mbox, MH, and Outlook > Express (dbx) folders all at the same time or per user. Well, both would require quite a 99% rewrite, so a few hundred hours... Do you have so much time? If you're still student, maybe :) But I'm not one anymore. And with IMAP, is there really a need for maildir, mh, pop3, etc. support? Well, it would surely be interesting to code: this may be the positive point :) > I also question whether or not webmail-omail has a future with products > such as squirrelmail being available, so I am curious to know what other > users of webmail-omail think. Yep, let's see :) regards, Olivier -- _______________________________________________________ Olivier Müller - PGP key ID: 0x0E84D2EA - Switzerland E-Mail: http://omx.ch/mail/ - AIM/iChat: swix3k |
From: Jim W. <ji...@tv...> - 2004-03-18 18:35:58
|
Personally, just my two cents I would love to see this project dropped and more time put into building up oMail Admin, but I'm being selfish in this respect I know. ;) We love oMail Admin. Thanks all, Jim TVCNet.com On 3/17/04 11:02 PM, "Carter Smithhart" <der...@de...> wrote: > Olivier, > > Yes, it does seem that omail-webmail is in need of a change of > something. > > I'd just like to point out that one of the special features that > omail-webmail has that other webmail packages don't seem to have is the > sheer number of translations. > > Here are a few ideas that I've had which may or may not revitalize the > project: > - Implement omail-webmail using Template Toolkit (bugzilla uses it) to > allow easier separation of code and UI. This allows a non-programmer to > modify the UI without having to change the logic that drives the app. > - Rewrite omail-webmail using the perl MailTool library. This would > allow omail-webmail to access imap, pop3, maildir, mbox, MH, and Outlook > Express (dbx) folders all at the same time or per user. > > I also question whether or not webmail-omail has a future with products > such as squirrelmail being available, so I am curious to know what other > users of webmail-omail think. > > Carter > > > On Wed, 2004-03-17 at 14:00, Olivier Mueller wrote: >> Hello, bonjour! >> >> Since a few months I'm wondering what to do with the >> omail-webmail project: should it be continued or >> stopped? This is what I'd like to ask you (the =~ 200 >> people one these lists). >> >> The main concern I had 4 years ago, when I started >> omail-webmail (forked from the Neomail project) was speed >> & performance (& fun :) : it was then the case with direct >> Maildir access compared to complex access via imap. >> Openwebmail continued on this way for "mbox-based" accounts >> (www.openwebmail.org), with many nice features, while >> omail-webmail stayed a bit behind: there are many >> features missing, especially folders support and >> decoding of base64-encoded mails to name just two of them. >> >> But omail-webmail is now old and IMHO not secure >> enough for "serious" hosting (it even came on bugtraq last year: >> http://www.securityfocus.com/archive/1/334056 and there >> are probably other security issues): I belive that >> running a suidperl based CGI is not the best solution >> nowadays. Other problem: the installation is still quite >> complex (check the ML archive :). >> >> >> Today it's easier to setup qmail + vmailmgr + courier-imap >> and an imap-based webmail like squirrelmail than the >> same with omail-webmail, there are even automated tools to >> do that (cf freshmeat). And it's safer for the server too: >> no more suidperl, and PHP is quite standard now too. >> I remember that it wasn't the case 3-4 years ago, with >> IMP/horde setup and uw-imapd libraries, etc. >> >> So the question is: what next? :-) Are there still >> people/servers using omail-webmail? >> >> >>> From a personal point of view, I think I'd rather concentrate >> on other open source projects (omail-admin, ospam: spam >> fighing add-on for qmail+vmailmgr, and phpmyadmin) than >> spending more time on omail-webmail, trying to reinvent the >> wheel and implement weird things (MIME support, attachments >> decoding, folders support etc) which are already nicely >> programmed elsewhere (squirrel, IMP, etc.). Or are >> there people around willing to continue de developement >> of omail-webmail? >> >> >> All my customers are still using omail-webmail, so >> in any case I will have to find a solution anyway :). Now >> I'm thinking about an automated transition to >> squirrelmail, with scripts to (server-wide) convert >> omail's pseudo folders to courier-imap compatible IMAP >> folders, and if possible do the same with the addressbook. >> Maybe you even already coded something like that? >> >> >> Feedback welcome! It was fun working with you :-) >> >> Regards, >> Olivier > > > > ------------------------------------------------------- > This SF.Net email is sponsored by: IBM Linux Tutorials > Free Linux tutorial presented by Daniel Robbins, President and CEO of > GenToo technologies. Learn everything from fundamentals to system > administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click > _______________________________________________ > Omail-devel mailing list > Oma...@li... > https://lists.sourceforge.net/lists/listinfo/omail-devel > |
From: Piotrek <lan...@dk...> - 2004-03-18 15:07:52
|
Hi, I'm still using omail-webmail2 as a main "web-mail-api" and I think it serves quite well. In my opinion, if You may develope this project so please do it. I also understand it's not an easy duty. Anyway, if You decide not to continue webmail, it'd be very useful for all of us if You propose some alternative (and simple way to migrate). ...but think twice and rethink ! Best regards, Piotrek ----- Original Message ----- From: <oma...@li...> To: <oma...@li...> Sent: Thursday, March 18, 2004 5:15 AM Subject: Omail-devel digest, Vol 1 #337 - 1 msg > Send Omail-devel mailing list submissions to > oma...@li... > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.sourceforge.net/lists/listinfo/omail-devel > or, via email, send a message with subject or body 'help' to > oma...@li... > > You can reach the person managing the list at > oma...@li... > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Omail-devel digest..." > > > Today's Topics: > > 1. omail-webmail: what next? (Olivier Mueller) > > --__--__-- > > Message: 1 > From: Olivier Mueller <om-...@om...> > Reply-To: oma...@li... > To: omail-devel <oma...@li...>, omail-news <oma...@li...> > Date: Wed, 17 Mar 2004 23:00:27 +0100 > Subject: [Omail-devel] omail-webmail: what next? > > Hello, bonjour! > > Since a few months I'm wondering what to do with the > omail-webmail project: should it be continued or > stopped? This is what I'd like to ask you (the =~ 200 > people one these lists). > > The main concern I had 4 years ago, when I started > omail-webmail (forked from the Neomail project) was speed > & performance (& fun :) : it was then the case with direct > Maildir access compared to complex access via imap. > Openwebmail continued on this way for "mbox-based" accounts > (www.openwebmail.org), with many nice features, while > omail-webmail stayed a bit behind: there are many > features missing, especially folders support and > decoding of base64-encoded mails to name just two of them. > > But omail-webmail is now old and IMHO not secure > enough for "serious" hosting (it even came on bugtraq last year: > http://www.securityfocus.com/archive/1/334056 and there > are probably other security issues): I belive that > running a suidperl based CGI is not the best solution > nowadays. Other problem: the installation is still quite > complex (check the ML archive :). > > > Today it's easier to setup qmail + vmailmgr + courier-imap > and an imap-based webmail like squirrelmail than the > same with omail-webmail, there are even automated tools to > do that (cf freshmeat). And it's safer for the server too: > no more suidperl, and PHP is quite standard now too. > I remember that it wasn't the case 3-4 years ago, with > IMP/horde setup and uw-imapd libraries, etc. > > So the question is: what next? :-) Are there still > people/servers using omail-webmail? > > > >From a personal point of view, I think I'd rather concentrate > on other open source projects (omail-admin, ospam: spam > fighing add-on for qmail+vmailmgr, and phpmyadmin) than > spending more time on omail-webmail, trying to reinvent the > wheel and implement weird things (MIME support, attachments > decoding, folders support etc) which are already nicely > programmed elsewhere (squirrel, IMP, etc.). Or are > there people around willing to continue de developement > of omail-webmail? > > > All my customers are still using omail-webmail, so > in any case I will have to find a solution anyway :). Now > I'm thinking about an automated transition to > squirrelmail, with scripts to (server-wide) convert > omail's pseudo folders to courier-imap compatible IMAP > folders, and if possible do the same with the addressbook. > Maybe you even already coded something like that? > > > Feedback welcome! It was fun working with you :-) > > Regards, > Olivier > -- > _______________________________________________________ > Olivier Müller - PGP key ID: 0x0E84D2EA - Switzerland > E-Mail: http://omx.ch/mail/ - AIM/iChat: swix3k > > > > > > --__--__-- > > _______________________________________________ > Omail-devel mailing list > Oma...@li... > https://lists.sourceforge.net/lists/listinfo/omail-devel > > > End of Omail-devel Digest > |
From: Carter S. <der...@de...> - 2004-03-18 07:02:35
|
Olivier, Yes, it does seem that omail-webmail is in need of a change of something. I'd just like to point out that one of the special features that omail-webmail has that other webmail packages don't seem to have is the sheer number of translations. Here are a few ideas that I've had which may or may not revitalize the project: - Implement omail-webmail using Template Toolkit (bugzilla uses it) to allow easier separation of code and UI. This allows a non-programmer to modify the UI without having to change the logic that drives the app. - Rewrite omail-webmail using the perl MailTool library. This would allow omail-webmail to access imap, pop3, maildir, mbox, MH, and Outlook Express (dbx) folders all at the same time or per user. I also question whether or not webmail-omail has a future with products such as squirrelmail being available, so I am curious to know what other users of webmail-omail think. Carter On Wed, 2004-03-17 at 14:00, Olivier Mueller wrote: > Hello, bonjour! > > Since a few months I'm wondering what to do with the > omail-webmail project: should it be continued or > stopped? This is what I'd like to ask you (the =~ 200 > people one these lists). > > The main concern I had 4 years ago, when I started > omail-webmail (forked from the Neomail project) was speed > & performance (& fun :) : it was then the case with direct > Maildir access compared to complex access via imap. > Openwebmail continued on this way for "mbox-based" accounts > (www.openwebmail.org), with many nice features, while > omail-webmail stayed a bit behind: there are many > features missing, especially folders support and > decoding of base64-encoded mails to name just two of them. > > But omail-webmail is now old and IMHO not secure > enough for "serious" hosting (it even came on bugtraq last year: > http://www.securityfocus.com/archive/1/334056 and there > are probably other security issues): I belive that > running a suidperl based CGI is not the best solution > nowadays. Other problem: the installation is still quite > complex (check the ML archive :). > > > Today it's easier to setup qmail + vmailmgr + courier-imap > and an imap-based webmail like squirrelmail than the > same with omail-webmail, there are even automated tools to > do that (cf freshmeat). And it's safer for the server too: > no more suidperl, and PHP is quite standard now too. > I remember that it wasn't the case 3-4 years ago, with > IMP/horde setup and uw-imapd libraries, etc. > > So the question is: what next? :-) Are there still > people/servers using omail-webmail? > > > >From a personal point of view, I think I'd rather concentrate > on other open source projects (omail-admin, ospam: spam > fighing add-on for qmail+vmailmgr, and phpmyadmin) than > spending more time on omail-webmail, trying to reinvent the > wheel and implement weird things (MIME support, attachments > decoding, folders support etc) which are already nicely > programmed elsewhere (squirrel, IMP, etc.). Or are > there people around willing to continue de developement > of omail-webmail? > > > All my customers are still using omail-webmail, so > in any case I will have to find a solution anyway :). Now > I'm thinking about an automated transition to > squirrelmail, with scripts to (server-wide) convert > omail's pseudo folders to courier-imap compatible IMAP > folders, and if possible do the same with the addressbook. > Maybe you even already coded something like that? > > > Feedback welcome! It was fun working with you :-) > > Regards, > Olivier |
From: Olivier M. <om-...@om...> - 2004-03-17 22:00:32
|
Hello, bonjour! Since a few months I'm wondering what to do with the omail-webmail project: should it be continued or stopped? This is what I'd like to ask you (the =~ 200 people one these lists). The main concern I had 4 years ago, when I started omail-webmail (forked from the Neomail project) was speed & performance (& fun :) : it was then the case with direct Maildir access compared to complex access via imap. Openwebmail continued on this way for "mbox-based" accounts (www.openwebmail.org), with many nice features, while omail-webmail stayed a bit behind: there are many features missing, especially folders support and decoding of base64-encoded mails to name just two of them. But omail-webmail is now old and IMHO not secure enough for "serious" hosting (it even came on bugtraq last year: http://www.securityfocus.com/archive/1/334056 and there are probably other security issues): I belive that running a suidperl based CGI is not the best solution nowadays. Other problem: the installation is still quite complex (check the ML archive :). Today it's easier to setup qmail + vmailmgr + courier-imap and an imap-based webmail like squirrelmail than the same with omail-webmail, there are even automated tools to do that (cf freshmeat). And it's safer for the server too: no more suidperl, and PHP is quite standard now too. I remember that it wasn't the case 3-4 years ago, with IMP/horde setup and uw-imapd libraries, etc. So the question is: what next? :-) Are there still people/servers using omail-webmail? >From a personal point of view, I think I'd rather concentrate on other open source projects (omail-admin, ospam: spam fighing add-on for qmail+vmailmgr, and phpmyadmin) than spending more time on omail-webmail, trying to reinvent the wheel and implement weird things (MIME support, attachments decoding, folders support etc) which are already nicely programmed elsewhere (squirrel, IMP, etc.). Or are there people around willing to continue de developement of omail-webmail? All my customers are still using omail-webmail, so in any case I will have to find a solution anyway :). Now I'm thinking about an automated transition to squirrelmail, with scripts to (server-wide) convert omail's pseudo folders to courier-imap compatible IMAP folders, and if possible do the same with the addressbook. Maybe you even already coded something like that? Feedback welcome! It was fun working with you :-) Regards, Olivier -- _______________________________________________________ Olivier Müller - PGP key ID: 0x0E84D2EA - Switzerland E-Mail: http://omx.ch/mail/ - AIM/iChat: swix3k |
From: Ibnu A. J. <jun...@te...> - 2004-03-10 11:38:41
|
When first login now work fine , but if save messeges(or move it to trash,reply) after i read the messeges .. it happen again... Any help? -- Juntriaji |
From: Carter S. <der...@de...> - 2004-03-02 07:25:15
|
Check the suexec_log file... apache requires certain ownership settings when doing suexec On Thu, 2004-02-12 at 15:16, Drew wrote: > I'm attempting to install webmail. > When I attempt to run the CGI-SCRIPTS as USER: Webmail GROUP: Webmail I am > getting an internal server error. > The log files say that I prematurely ended the headers. If I run these under > the normal "nobody nobody" I don't have any problem, but obviously sudo > doesn't work. > What do I need to do? > > Drew (dr...@ks...) > > FreeBSD 4.8 > Apache 1.3 > > > > ------------------------------------------------------- > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > Build and deploy apps & Web services for Linux with > a free DVD software kit from IBM. Click Now! > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > _______________________________________________ > Omail-devel mailing list > Oma...@li... > https://lists.sourceforge.net/lists/listinfo/omail-devel |
From: Carter S. <der...@de...> - 2004-03-02 07:06:01
|
Michael, Change applied. Carter On Fri, 2004-02-20 at 08:05, michael bauer wrote: > hallo olivier, > > a domainname can contain a "-" > > @@ -396,7 +396,7 @@ > > if (($vmailmgr || $vpopmail) && $cgi_mode eq "suid") { > > - if (!($userid =~ /([\.\-\_,A-Z,a-z,0-9]*)\@([\w\.]*)$/)) { > + if (!($userid =~ /([\.\-\_,A-Z,a-z,0-9]*)\@([\w-\.]*)$/)) { > omailerror("domain name is missing : format userid\@domain"); > } else { > $userid = $1; > > gruss, michael bauer > > |
From: Carter S. <der...@de...> - 2004-03-02 05:25:31
|
On Tue, 2004-02-24 at 13:04, Jason Norred wrote: > Ok... I'm attempting to setup Omail-Webmail on my server with Qmail and > Vmailmgr. > > I have created a DNS entry for webmail.norredtech.com. > > I have created a webmail user and a webmail group. > > I have setup a Virtual Host tag in Apache as follows... > > <VirtualHost *> > ServerName webmail.norredtech.com > User webmail > Group webmail > DocumentRoot /var/www/webmail > ErrorLog /var/log/httpd/webmail/error_log > CustomLog /var/log/httpd/webmail/access_log common > </VirtualHost> > > I think suexec is working... It is mentioned in the apache logs and sudo > is installed. I have put the expected entries into the /etc/sudoers file > using visudo. > > I have created /var/omail. Who should own this? root? or webmail? webmail. > Where should I store all the files that get unpacked? (ex. omail.pl) Above you have /var/www/webmail as your omail DocumentRoot, I'd use that. > Where should I put the contrib/onelogin files? Just keep them unpacked where they get unpacked. i.e. you'd have: /var/www/webmail/contrib/onelogin > Thanks for any help... > > Jason N. Hope I helped! Carter Smithhart |
From: Jason N. <jn...@no...> - 2004-02-24 21:12:26
|
Ok... I'm attempting to setup Omail-Webmail on my server with Qmail and Vmailmgr. I have created a DNS entry for webmail.norredtech.com. I have created a webmail user and a webmail group. I have setup a Virtual Host tag in Apache as follows... <VirtualHost *> ServerName webmail.norredtech.com User webmail Group webmail DocumentRoot /var/www/webmail ErrorLog /var/log/httpd/webmail/error_log CustomLog /var/log/httpd/webmail/access_log common </VirtualHost> I think suexec is working... It is mentioned in the apache logs and sudo is installed. I have put the expected entries into the /etc/sudoers file using visudo. I have created /var/omail. Who should own this? root? or webmail? Where should I store all the files that get unpacked? (ex. omail.pl) Where should I put the contrib/onelogin files? Thanks for any help... Jason N. |
From: michael b. <mi...@in...> - 2004-02-20 16:11:59
|
hallo olivier, a domainname can contain a "-" @@ -396,7 +396,7 @@ if (($vmailmgr || $vpopmail) && $cgi_mode eq "suid") { - if (!($userid =~ /([\.\-\_,A-Z,a-z,0-9]*)\@([\w\.]*)$/)) { + if (!($userid =~ /([\.\-\_,A-Z,a-z,0-9]*)\@([\w-\.]*)$/)) { omailerror("domain name is missing : format userid\@domain"); } else { $userid = $1; gruss, michael bauer -- |
From: michael b. <mi...@in...> - 2004-02-18 22:15:06
|
hallo, i use omail-webmail with vmailmgr. it seems that some passwords not working per webmail. the omail.pl uses this command to pass authentication to vauthenticate: echo -e "domain.de\x00user\x00dave\x00" | /usr/local/bin/vauthenticate when i tried this on the shell - same problem changing the nullbyte string from \x00 to \0 everything works as expected! a trace from vauthenticate with \x00: read(0, "domain.de\0user\rave\0\n", 513) = 20 a trace from vauthenticate with \0: read(0, "domain.de\0user\0dave\0\n", 513) = 21 all passwords beginning with "d" are affected. so - maybe someone with more perl knowledge than me could tell which other effects this could have.... viele gruesse, michael bauer -- |
From: Drew <dr...@ks...> - 2004-02-12 23:17:42
|
I'm attempting to install webmail. When I attempt to run the CGI-SCRIPTS as USER: Webmail GROUP: Webmail I am getting an internal server error. The log files say that I prematurely ended the headers. If I run these under the normal "nobody nobody" I don't have any problem, but obviously sudo doesn't work. What do I need to do? Drew (dr...@ks...) FreeBSD 4.8 Apache 1.3 |