Quote:But Roundcube giving me a :
"CONFIGURATION ERROR

config.inc.php was not found.
Please read the INSTALL instructions!"

I will first check the if customer has e-mail configured in the panel.

Quote:My rerouting from onsecure to secure when http://panel.topmatica.nl  is used is not working. I come to the old Joomla site which is offline. Despite the the Vhost override   

Secure website and panel is working and reacting on https://panel.topmatica.nl

(03-24-2018, 07:28 AM)TGates Wrote: Also double check the file and folder locations (and that the files even exist) for roundcube (/etc/sentora/panel/etc/apps/webmail/).


The port forward is not working properly, or the main domain vhost is not set properly. PM me your httpd-vhosts.conf.

(06-29-2018, 07:00 PM)inkoop@topmatica.nl Wrote:  Sorry that it takes so long.

/etc/sentora/panel/etc/apps/webmail/   does exists and is accessible when you use the complete path in URL in browser.

But i will send you my httpd-vhost.conf.

Has it something to do with rights on the config files?  Has this influence on how you access the Roundcube?!
domain/webmail   not working
domain/etc/apps/webmail/   is working !

Quote:CONFIGURATION ERROR

config.inc.php was not found.
Please read the INSTALL instructions!

(01-26-2019, 12:12 AM)inkoop@topmatica.nl Wrote: Some were last year I upgraded Roundcube to 1.3.7 .  Is it compatible with Sentora 1.0.3 ?
That's why I got these 

Or is it something else or is there a solution for getting Roundcube 1.3.7 work with Sentora?

(01-26-2019, 08:01 AM)TGates Wrote: There should be a config.inc.php in /etc/sentora/panel/etc/apps/webmail/config if roundcube was upgraded properly. I believe they changed the location and name of the config file.

(10-22-2014, 05:52 AM)TGates Wrote: NOTICE: This could be vulnerable as the sub domains are not locked down using suhosin. Use at your own risk!

(04-17-2020, 11:45 PM)iraqiboy90 Wrote: Hi
Is this still a possibility?

I used the following code to lock it down with a wildcard certificate I already use for the main domain, which works fine, visually. I also changed it to 443 on the first part and added an http to https redirect with the last part. Is there anything behind that scene about security this might affect?

Code:

</VirtualHost> # Configuration for WebMail <VirtualHost *:443> ServerName webmail.somedomain.com DocumentRoot "/etc/sentora/panel/etc/apps/webmail/" AddType application/x-httpd-php .php <Directory "/etc/sentora/panel/etc/apps/webmail/"> Options +FollowSymLinks -Indexes AllowOverride All Require all granted </Directory> SSLEngine on SSLProtocol ALL -SSLv2 -SSLv3 SSLHonorCipherOrder On SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS SSLCertificateFile /etc/letsencrypt/live/somedomain.com/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/somedomain.com/privkey.pem SSLCertificateChainFile /etc/letsencrypt/live/somedomain.com/chain.pem # Keeping bellow for future upgrades. # Requires Apache >= 2.4 SSLCompression off </VirtualHost> <virtualhost *:80> ServerName webmail.somedomain.com RewriteEngine on ReWriteCond %{SERVER_PORT} !^443$ RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]

Does adding this solves the issue?

Code:

php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"

Also, do I need this?

Code:

php_admin_value open_basedir /var/sentora/temp/:/etc/sentora/panel/etc/apps/webmail:/var/sentora/logs/roundcube

Quote:php_admin_value suhosin.executor.func.blacklist "passthru, show_source, shell_exec, system, pcntl_exec, popen, pclose, proc_open, proc_nice, proc_terminate, proc_get_status, proc_close, leak, apache_child_terminate, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, escapeshellcmd, escapeshellarg, exec"