[imp] pref to display full from address in mailbox list / message view

2017-12-06 Thread Michael Menge

Hi,

in the last months, we have seen many spam and malware mails that have  
used "forged" mail
addresses in the "display-name" part of the from address to misled  
users to trust mails

that seam to be send by known senders.

With DMARC, SPF and DKIM it is now possible to verify the sender of a  
mail.  But IMP
does not display the "angle-addr" or "addr-spec" (see  
https://tools.ietf.org/html/rfc5322#section-3.4)
by default in the mailbox list or the message view so users can be  
fooled easily.


I know that it is displayed as tool-tip. But some/most users are not  
aware of the
tool-tip and those that are will only use it, if they already suspect  
that something

is wrong with the mail.

I would like that IMP would display the complete from address by default,
or at least an option or pref to configure that it is shown. IMP 4  
used to display
the "angle-addr"/"addr-spec". I remember that displaying the full  
address has been

discussed on one of the horde lists some time ago but I was unable to find the
old discussion. I remember that the suggestion has been rejected but
i can't remember the reasons.

I am aware that the space in the "From:" column in the mailbox list is  
limited,
but in the message view there is enough space to display the full from  
address.
This kind of "spoofing" has become a serious security problem for us  
and our users.



Also the following link might be from interest  
https://www.mailsploit.com/index
The demos shows that IMP has no problem with \0 and \n and Injections,  
the tool-tip

shows the "real" domain, but it is not displayed by default.


Regards

   Michael Menge





M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

[imp] bcc heades not included in copy in sent mail folder

2020-07-14 Thread Michael Menge

Hi,

in IMP H5 6.2.x the bcc header is not included in the copy of the mail  
that is saved in
the sent mail folder. Is this a bug, or working as intended. If it is  
the later,

what is the reason?

Kind regards

   Michael


M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] bcc heades not included in copy in sent mail folder

2020-07-14 Thread Michael Menge

Hi Jens,

Quoting Jens Wahnes :


Michael Menge wrote:
in IMP H5 6.2.x the bcc header is not included in the copy of the  
mail that is saved in
the sent mail folder. Is this a bug, or working as intended. If it  
is the later,

what is the reason?


It's a bug, introduced by the recently released version 6.2.25 and  
present in 6.2.26 as well. See https://bugs.horde.org/ticket/15020




Thanks for the information and the patch


M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


[imp] show rejected recipients

2020-08-31 Thread Michael Menge

Hi,

if a mail send by imp contains recipients that are rejected by the smtp server
in the smtp dialog, the error message "Message could not be delivered  
- the address was

not found, is unknown, or is not receiving messages." is shown.

Is there an option to display the failed addresses?

class Horde_Smtp_Exception_Recipients (Horde/Smtp/Exception/Recipients.php)
indicates that horde has a list of the failed addresses.

Kind regards

   Michael Menge

--------
Michael Menge  Tel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


[imp] IMAP flags not created by IMP

2021-02-11 Thread Michael Menge

Hi,

is it possible to by imap flags that where set/created by other  
clients, or other users (on a shard folder).

Or is it possible to import/sync these flags

Kind regards

   Michael Menge


Michael Menge  Tel.: (49) 7071 / 29-70316
Universität Tübingen   Fax.: (49) 7071 / 29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


[imp] horde log flooded with rewind()/feof()/fread() expects parameter 1 to be resource, null given

2022-08-30 Thread Michael Menge

Hi,

in the last 2 days our horde logs have been flooded with the following ERRORS:

2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: rewind()  
expects parameter 1 to be resource, null given [pid 1776546 on line  
3166 of "/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: feof() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3168 of  
"/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: fread() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3169 of  
"/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: feof() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3168 of  
"/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: fread() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3169 of  
"/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: feof() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3168 of  
"/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: fread() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3169 of  
"/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: feof() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3168 of  
"/var/www/html/horde/imp/lib/Compose.php"]
2022-08-29T14:45:24+02:00 WARN: HORDE [imp] PHP ERROR: fread() expects  
parameter 1 to be resource, null given [pid 1776546 on line 3169 of  
"/var/www/html/horde/imp/lib/Compose.php"]


These errors are in the function addAttachmentFromPart($part)
I don't know why the stream is null, but I found an old thread  
regarding the same problem in renderMIMEPart
(horde/imp/lib/Contents.php)  
https://imp.horde.narkive.com/u1CD9QAA/rendermimepart-php-error


where a sanity check had been added by Michael Slusarz

I would suggest an similar check


  public function addAttachmentFromPart($part)
  {
/* Extract the data from the Horde_Mime_Part. */
$atc_file = Horde::getTempFile('impatt');

   $stream = $part->getContents(array(
'stream' => true
));
+  if (!is_null($stream)) {
rewind($stream);
$dest_handle = fopen($atc_file, 'w+b');
while (!feof($stream)) {
fwrite($dest_handle, fread($stream, 1024));
}
fclose($dest_handle);
$size = ftell($stream);
+   }
if ($size === false) {
throw new IMP_Compose_Exception(sprintf(_("Could not attach  
%s to the message."), $part->getName()));

}

return $this->_addAttachment(
$atc_file,
$size,
$part->getName(true),
$part->getType()
);
  }

But I am unsure if the Exception should go into the new if-Block and  
we throw a new IMP_Compose_Exception or

the "$size === false" would also be triggered if $stream is null.

Kind Regards

   Michael Menge




Michael Menge  Tel.: (49) 7071 / 29-70316
Universität Tübingen   Fax.: (49) 7071 / 29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


[imp] Login Faild with IMP 4.2

2008-06-02 Thread Michael Menge

Hi,

I need some help finding an error in my horde/imp configuration.
We use Horde 3.2, Imp 4.2 and other recent Horde Application on a SLES 10 SP2
with a Postgres Database on localhost.

test.php and imp/test.php show no Problems.

Using the PHP Mail Server Support Test on imp/test.php I am able to
authenticate to my IMAP-Server

Using this data in my imp/config/servers.php and the login page from  
imp I recieve login failed. There are no errors/warnings in the  
horde/apache logfiles.
The logfiles from my IMAP server and logging rules in iptables  
indicate that imp does not send any tcp packages to the imap server.


Regards

   Michael Menge


test.php

Horde Version

* Horde: 3.2

Horde Applications

* Dimp: H3 (1.0)
* Horde: 3.2
* Imp: H3 (4.2) (run Imp tests)
* Ingo: H3 (1.2) (run Ingo tests)
* Kronolith: H3 (2.2) (run Kronolith tests)
* Mimp: H3 (1.1)
* Mnemo: H3 (2.2)
* Nag: H3 (2.2)
* Turba: H3 (2.2) (run Turba tests)

PHP Version

* View phpinfo() screen
* View loaded extensions
* PHP Version: 5.2.5
* PHP Major Version: 5.2
* PHP Minor Version: 5
* PHP Version Classification: release
* You are running a supported version of PHP.

PHP Module Capabilities

* Ctype Support: Yes
* DOM XML Support: Yes
* FTP Support: Yes
* GD Support: Yes
* Gettext Support: Yes
* GeoIP Support (via PECL extension): No
  Horde can optionally use the GeoIP extension to provide faster  
country name lookups.

* Iconv Support: Yes
* GNU Iconv Support: Yes
* IMAP Support: Yes
* JSON Support: Yes
* LDAP Support: Yes
* LZF Compression Support: No
  If the lzf PECL module is available, Horde can compress some  
cached data in your session to make your session size smaller.

* Mbstring Support: Yes
* PCRE Support: Yes
* PCRE UTF-8 Support: Yes
* Mcrypt Support: Yes
* memcached Support (memcache): No
  The memcache PECL module is needed only if you are using the  
memcached SessionHandler. See horde/docs/INSTALL for information on  
how to install PECL/PHP extensions.

* MIME Magic Support (fileinfo): No
  The fileinfo PECL module or the mime_magic PHP extension (see  
below) will most likely provide faster MIME Magic lookups than the  
built-in Horde PHP magic code. See horde/docs/INSTALL for information  
on how to install PECL/PHP extensions.

* MIME Magic Support (mime_magic): No
  The fileinfo PECL module (see above) or the mime_magic PHP  
extension will most likely provide faster MIME Magic lookups than the  
built-in Horde PHP magic code. See horde/docs/INSTALL for information  
on how to install PECL/PHP extensions.

* MySQL Support: No
  The MySQL extension is only required if you want to use a MySQL  
database server for data storage.

* OpenSSL Support: Yes
* PostgreSQL Support: Yes
* Session Support: Yes
* XML Support: Yes
* Zlib Support: Yes

Miscellaneous PHP Settings

* magic_quotes_runtime disabled: Yes
* memory_limit value: 512M
  If PHP's internal memory limit is not set high enough Horde  
will not be able to handle large data items (e.g. large mail  
attachments in IMP). You should set the value of memory_limit in  
php.ini to a sufficiently high value - at least 64M is recommended.

* safe_mode disabled: Yes
* session.use_trans_sid disabled: Yes
* session.auto_start disabled: Yes
* zlib.output_compression disabled: Yes
* zend_accelerator.compress_all disabled: Yes

File Uploads

* file_uploads enabled: Yes
* upload_max_filesize: 20M
* post_max_size: 20M

Required Horde Configuration Files

* config/conf.php: Yes
* config/mime_drivers.php: Yes
* config/nls.php: Yes
* config/prefs.php: Yes
* config/registry.php: Yes

PHP Sessions

* Session counter: 2
* To unregister the session: click here

PEAR

* PEAR Search Path (PHP's include_path):   
/zdv-system/data/htdocs/horde-3.2/lib:.:/usr/share/php5/PEAR

* PEAR: Yes
* Recent PEAR: Yes
* Mail: Yes
* Mail_Mime: Yes
* Mail_mimeDecode: Yes
* Log: Yes
* DB: Yes
* MDB2: Yes
* Net_Socket: Yes
* Date: Yes
* Auth_SASL: Yes
* HTTP_Request: Yes
* HTTP_WebDAV_Server: Yes
* Net_SMTP: Yes
* Services_Weather: Yes
* Cache: Yes
* XML_Serializer: Yes


-
IMP Version

* IMP: H3 (4.2)

Other Horde Applications

* dimp: Yes (Version: H3 (1.0))
* gollem: No
  Gollem provides access to local VFS filesystems to attach files.
* ingo: Yes (Version: H3 (1.2))
* mimp: Yes (Version: H3 (1.1))
* nag: Yes (Version: H3 (2.2))
* turba: Yes (Version: H3 (2.2))

PHP Version

* PHP Version: 5.2.5
* PHP Major Version: 5.2
* PHP Minor Version: 5
* PHP Version Classification: release
* You are running a supported version of PHP.

PHP Module Ca

Re: [imp] Spam issues, need help.

2008-06-10 Thread Michael Menge
Quoting Dos Wizard <[EMAIL PROTECTED]>:

> Hello,
>
> I am running a free webmail service based on IMP, and while I had
> successfully controlled incoming spam on the mail server level, I have
> issues of outgoing spam, thus someone attempts to use an automated bot
> process to send outgoing spam via horde.
>
> Now, probably I would need the following measures:
> a) To use captcha on the login box of horde. Is there any mod around for
> that, or I should alter the code myself?
> b) To call spamc directly from horde per each mail sent to block
> whatever spamassassin can block as spam.
> c) To put a delay routine which would allow only one mail per two
> minutes to be sent per account
> d) To trim a setting to disallow someone to replace the sender e-mail
> given by the service thus instead of send @.tld to
> change it to @.tld
>
> The problem is that users have sometimes stupid passwords like 1234 or
> 12345 making very easy for a spammer to break into accounts, with
> trivial automated bot process.
>
> Now what I need:
> for (a) I need someone to point where in the code, is the imap
> authentication routine. (To alter it). Or if there's a mod around for that.
> for (b) and (c) where in the code is the routine which connects to imap
> to send mails.
> for (d) which is the setting (obvious).
>
I cant help with (a) but.

(b) Imp sends e-mails by calling sendmail (or any program which  
accepts the same options) or by talking to an smtpserver. You can use  
a wrapper sctript to pass the e-Mail to spamc befor sending it to  
sendmail, or you can setup you smtpserver to scan e-Mails comming from  
your IMP Server.

(c) The new Horde 3.2 and IMP 4.2 have this feature build in.

(d) You can lock you $_prefs['from_addr'] in horde/configs/prefs.php  
or you can
patch horde/templates/prefs/text.inc

--- text.inc.orig   2007-12-20 16:04:04.0 +0100
+++ text.inc2008-06-09 15:03:27.0 +0200
@@ -1,2 +1,6 @@
   
-
+
+//[end]
+/>

The patch has the favor that the from_address is still shown on the  
identity page. Both ways will disallow the editing of the from_addres  
completly, so you must put it in the prefs for your users.

Regards

Michael


M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]
Waechterstrasse 76
72074 Tuebingen
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] Public mail folders

2008-10-31 Thread Michael Menge

Hi,


Quoting tom burkart <[EMAIL PROTECTED]>:


Hi all,
I just had a request for a feature in IMP as follows:

A need has come up to store all emails for a project in a  
common/public mail folder so that if a query comes up, anyone on the  
project can answer the query.


Is this possible and/or has this been implemented already?



it depends on the IMAP-Server you are using. If the IMAP-Server supports
Shared-Folders and ACLs, you can access the folders and manage the ACLs
with IMP



M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] imp problem displaying "To" column

2008-11-08 Thread Michael Menge

Hi,

it's a feature. Normaly IMP will display the from address in an normal  
folder (not send folder). If the from address is associated to the  
account of the
user it will display the to address. In the send folder IMP reacts the  
other way round, it will display the from address if from address is  
not associated

with the account.

IMP uses the email adresse that are stored in the Identities from- address,
and alias adresses.


Quoting Michael McCallister <[EMAIL PROTECTED]>:


Greetings,

I recently installed Horde Groupware Webmail Edition 1.2 and  
everything went perfectly except for one issue.  The "To" column (as  
displayed in the "Sent" column) is displaying the "From" header  
information for all emails not sent via IMP.  Here is a cropped  
screen shot illustrating the problem:  
http://caffeine.contactdesigns.com/~jolt/imp_sentfolder_tocolumn.png  
 When clicking to view the contents of an email from the "Sent"  
folder, it does display the value of the "To" header correctly.   
When I view the "Sent" folder in Thunderbird, it displays the "To"  
column correctly.


Here is information on my setup:

   * Centos 5 2.6.18-92.1.13.el5
   * PHP 5.2.6
   * MySQL 5.1
   * Dovecot 1.1.6
   * Horde Groupware Webmail Edition 1.2 (IMAP auth)
   * imap-2007d
   * lighttpd with PHP in fastcgi
   * './configure'  '--with-openssl=/usr' '--with-mysql' '--with-zlib'
 '--enable-inline-optimization' '--enable-fastcgi' '--disable-pdo'
 '--without-sqlite' '--with-gettext' '--with-mcrypt'
 '--with-imap=imap-2007d' '--with-iconv' '--enable-mbstring=all'
 '--enable-mbregex' '--with-gd' '--with-png-dir=/usr'
 '--with-jpeg-dir=/usr' '--with-mime-magic=/usr/share/magic.mime'

Does anyone know if this is a bug or some configuration option that  
I need to tweak for my setup?  If it is a bug, any ideas on an easy  
workaround or the files/functions that are most likely involved?


Any help is greatly appreciated!
Michael

BTW, HGWE is really nice - I really like it.  Here is the config I  
used to get it working on nginx (still testing nginx) in case anyone  
needs to run it on nginx:


   location ~ .php/? {
   root   html;
   fastcgi_pass   unix:/tmp/default-php.sock;
   fastcgi_index  index.php;
   set $path_info  "";
   if ($uri ~ "^(.+.php)(/.+)") {
   set  $path_info  $2;
   }
   fastcgi_param  PATH_INFO  $path_info;
   fastcgi_param  SCRIPT_FILENAME   
/sites/domain.com/htdocs$fastcgi_script_name;

   includefastcgi_params;
   }


--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]






M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] reset sort order of a folder

2009-01-22 Thread Michael Menge

Content-Type: text/plain;
charset=ISO-8859-1;
DelSp="Yes";
format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

Quoting Steve Paras-Charlton :


Ok, got an odd question here.

I have a very large mailbox (2+ messages) served to imp via imap  
 with a Maildir back-end.   Unfortunately it is slow (yes I know I   
should clean up), and it is even slow enough that if I search in it,  
 I get "no messages" regardless of the search criteria (I expect   
there's a timeout, but I haven't had a chance to look carefully).


My real problem is that I accidentally clicked about my first   
message and it is trying to sort my INBOX by From: field.  This   
results in the above mentioned suspected timeout, and I get "no   
messages" in my INBOX.  This makes reading my mail difficult, and   
unfortunately, since there are no messages, no headers are   
displayed, so I can't change the sort order back to msgno.


I've tried (without much hope) just resetting the default sort   
order, and as expected, no change.


Is there a way to reset the sort order on a folder without viewing it?



I created an enhanchement reqest (http://bugs.horde.org/ticket/7823)
which was rejected. If you have write acess to the database you can delete
sortpref for your user form the horde_prefs table



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:   
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift


smime.p7s
Description: S/MIME krytographische Unterschrift
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Problem: Maintenence work

2009-03-13 Thread Michael Menge

Hi,

Quoting Thomas Berger :


Hi Freaks,

we use the Horde Groupware Webmail Edition 1.2
with the following mail option:
Rename sent-mail folder at beginning of month

By this action is the folder successfully renamed,
but no new folder is created...

output from horde:

sent-mail folder being renamed at the start of the month.
The folder "sent-mail" was successfully renamed to "sent-mail-mar-2009".
The folder "sent-mail" already exists

But by a successfully rename can this folder never exist! 
Or where is my Problem?




http://bugs.horde.org/ticket/7745



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Max attachment size

2009-03-26 Thread Michael Menge

Hi,

Quoting Michael M Slusarz :

The MIME/IMAP/attachment code has been completely rewritten in IMP 5  
and, regardless, the outputted message *is* valid MIME.  However,  
you really shouldn't be using 'Forward Attachments Only' - you  
should be using 'Forward Entire Message' (I am very close to  
removing the other 2 options in IMP 5 completely).


The 'Forward Attachments Only' is needed. IMP4 has problems showning
Messages Forwarded "Forwarding Entire Message" if the original  
Messages contained Attachments and was signed with SMIME. I can't  
remember if the forwarded message had to be signed that the problem  
would be shown.


See http://bugs.horde.org/ticket/4297

How will/should IMP5 handle Forwarding signed messages?


Regards

 Michael Menge

M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Max attachment size

2009-04-08 Thread Michael Menge

Hi again,

Quoting Michael M Slusarz :


Quoting Michael Menge :


Hi,

Quoting Michael M Slusarz :

The MIME/IMAP/attachment code has been completely rewritten in IMP  
5 and, regardless, the outputted message *is* valid MIME.   
However, you really shouldn't be using 'Forward Attachments Only'  
- you should be using 'Forward Entire Message' (I am very close to  
removing the other 2 options in IMP 5 completely).


The 'Forward Attachments Only' is needed. IMP4 has problems showning
Messages Forwarded "Forwarding Entire Message" if the original  
Messages contained Attachments and was signed with SMIME. I can't  
remember if the forwarded message had to be signed that the problem  
would be shown.


See http://bugs.horde.org/ticket/4297

How will/should IMP5 handle Forwarding signed messages?


It forwards the entire signed message.  Thinking about this more,  
this makes the most sense.  If I send an encrypted message to  
someone, I *don't* want that person to forward that message to  
anyone else that can't decrypt the message - that message is meant  
for the the receiving person only (that is the whole purpose of  
encryption).




In this case we could get emails with more than one SMIME/signature.
The functions to verify the signature *must* be able to handle these,
and have to respect the mime-part bonderies, to be able to verifiy the  
forwarded message.



michael



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Admin can't read users email

2009-04-21 Thread Michael Menge

Quoting Michael Rubinsky :



Quoting Pete Masse :

It seems to me that the admin account has the ability to read all  
of the user's email from his/her login screen.  At least that's the  
way I thought I saw it at one time.  If this is true and I'm not  
mistaken, how is this made possible?


This is not something that is provided by Horde/IMP as distributed.  
Though I admit to seeing similar behavior with some big web  
providers via the control panel software they use.  
Hostdepartment.com comes to mind...


If the IMAP-Server supports acls the admin may be able to read the
users mails. But thats independend of the mail-client.



Thanks,
mike

--
The Horde Project (www.horde.org)
mrubi...@horde.org

"Time just hates me. That's why it made me an adult." - Josh Joplin
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org






M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Possible bug ?

2009-09-13 Thread Michael Menge



Quoting mic...@casa.co.cu:



so how i can send email truth horde webmail when the email address  
don't exists?


If you don't lock from_addr in imp prefs, the user/spammer can change
the from addres.

how make this , if no possible that horde have a possible security  
breach, a bug?


If you lock the pref you have to write a hock to set the from_addr.




M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


[imp] is Bug 8123 fixed in imp 4.3.4 and horde 3.3.5

2009-10-21 Thread Michael Menge

Hi,

I upgradet to  imp 4.3.4 and horde 3.3.5 and I still see this problem:
http://bugs.horde.org/ticket/8123

I wonder if this bug should be fixed in these versions and if,
what upgrade step I have might have missed?



Regards

Michael Menge


M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:   
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] is Bug 8123 fixed in imp 4.3.4 and horde 3.3.5

2009-10-21 Thread Michael Menge

Quoting Jan Schneider :


Zitat von Michael Menge :


Hi,

I upgradet to  imp 4.3.4 and horde 3.3.5 and I still see this problem:
http://bugs.horde.org/ticket/8123

I wonder if this bug should be fixed in these versions and if,
what upgrade step I have might have missed?


Yes, it's fixed and working fine here.



could you give me a hint which file was changed or a link to the commit?


Jan.

--
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/

--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org






M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] is Bug 8123 fixed in imp 4.3.4 and horde 3.3.5

2009-10-21 Thread Michael Menge

Quoting Jan Schneider :


Zitat von Michael Menge :


Quoting Jan Schneider :


Zitat von Michael Menge :


Hi,

I upgradet to  imp 4.3.4 and horde 3.3.5 and I still see this problem:
http://bugs.horde.org/ticket/8123

I wonder if this bug should be fixed in these versions and if,
what upgrade step I have might have missed?


Yes, it's fixed and working fine here.



could you give me a hint which file was changed or a link to the commit?


http://cvs.horde.org/diff.php/horde/js/src/Attic/accesskeys.js?sa=1&r1=1.7.2.4&r2=1.7.2.5


Thanks, I found the problem. As we used patches do upgrade, we
updated js/src/accesskeys.js but not js/accesskeys.js

how do i genereate the js/*.js ?
Which other type of files needs to be updated after using patches?



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] S/MIME with attachment

2009-10-26 Thread Michael Menge

Hi,

Quoting lst_ho...@kwsoft.de:


Zitat von lst_ho...@kwsoft.de:


Hello

when using S/MIME to encrypt a mail and display it in IMP/Horde the  
message is unreadable as sonn as some attachment is present. I  
suspected size limits but this is even true for 5kB attachments.


I found a reference to this problem but wonder if this show-stopper  
is still present in IMP 4 so we have to wait for IMP 5 ?


http://www.mail-archive.com/imp@lists.horde.org/msg04003.html

Many Thanks

Andreas


Is no one using S/MIME or is this a non-problem??


We are using S/MIME. We had problems with Signed & Encrypted
mails from Outlook / Outlook Express (http://bugs.horde.org/ticket/8629).
But i am able to read Encrypted Mails with Attachments


Any comments what could be wrong or how to solve??


Which Version of Horde/Impare you using?
Which Client created the encrypted message? Is it signed?
Are you able to read these messages with other clients?



No one on the list anymore??


Weekend :-)



Regards

Andreas

--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org






M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] is Bug 8123 fixed in imp 4.3.4 and horde 3.3.5

2009-10-26 Thread Michael Menge

Quoting Jan Schneider :


Zitat von Michael Menge :


Quoting Jan Schneider :


Zitat von Michael Menge :


Quoting Jan Schneider :


Zitat von Michael Menge :


Hi,

I upgradet to  imp 4.3.4 and horde 3.3.5 and I still see this problem:
http://bugs.horde.org/ticket/8123

I wonder if this bug should be fixed in these versions and if,
what upgrade step I have might have missed?


Yes, it's fixed and working fine here.



could you give me a hint which file was changed or a link to the commit?


http://cvs.horde.org/diff.php/horde/js/src/Attic/accesskeys.js?sa=1&r1=1.7.2.4&r2=1.7.2.5


Thanks, I found the problem. As we used patches do upgrade, we
updated js/src/accesskeys.js but not js/accesskeys.js


These should be included in the patches as well.



grep "+++" patch-horde-3.3.3-3.3.4 | grep -F 'accesskeys.js'
+++ horde-3.3.4/js/src/accesskeys.js2009-03-26 12:05:18.0 +0100

:-(



Which other type of files needs to be updated after using patches?


Any binary files.

Is there a list of changed (binary) files? Or a script to generate  
such a list from cvs?





M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Automatically moving Spam to related folder

2009-10-26 Thread Michael Menge


Quoting Bruno Costacurta :


Hello,

using IMP, how to automatically move email marked as spams to  
related Spam folder ?




Take a look at INGO
http://www.horde.org/ingo/



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] reconfiguring how IMP communicates with the IMAP server

2009-11-04 Thread Michael Menge

Hi,

Quoting "Robert P. J. Day" :



  as a short followup to my earlier post, i just copied over the
previous imp/ directory (very old version of IMP, but that will be
sufficient for now) and installed it under the current horde, at which
point the Mail icon now appears under horde, but no one can log in to
horde mail.

  i'm guessing that's because, in the few months past, someone else
reconfigured IMAP on this server so that it's almost certainly using
different and stronger authentication.  here's the current snippet
from imp/config/servers.php (that allegedly used to work):

$servers['imap'] = array(
'name' => 'IMAP Server',
'server' => 'localhost',
'hordeauth' => false,
'protocol' => 'imap/notls',
'port' => 143,
'folders' => '',
'namespace' => '',
'maildomain' => '[deleted].com',
'smtphost' => 'localhost',
'realm' => '',
'preferred' => '',
'dotfiles' => false,
'hierarchies' => array()
);

  that this file is now incorrect seems to be demonstrated by recent
entries in /tmp/horde.log of the form:

Nov 04 08:07:59 HORDE [error] [imp] FAILED LOGIN 192.168.169.1 to
localhost:143[imap/notls] ... blah blah ...

  do i just need to track down the person who did the reconfiguration
and ask what he did, and adjust this file accordingly?  and would that
be the *only* file i would need to tweak?  thanks.  once this is
running, i'll be updating all of the relevant horde apps but, for the
moment, the priority is to just get email running again.



You can use imp/test.php to test the IMAP connection and get hints how  
to configure imp/config/servers.php .


As you use imap/notls and many recent IMAP-Server don't accept
unencrypted authentication by default. You can try to use TLS or SSL
and check if unencrypted authentication is allowd by you IMAP-Server.

Michael




M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Imp and Spamassassin

2010-02-02 Thread Michael Menge

Quoting Jon Lewis :

I'm curious if anyone has done any patches for integration of  
spamassassin (to be used for checking mail as it's sent) with Imp?


Checking outgoing E-Mails with spamassassin is of limeted use,
as most headerbased rules can't trigger or would trigger also for
regular emails, and so you have to rely only on body rules.

i.e. For ISP's customers having their customers' usernames/passwords  
stolen or phished seems to be an ongoing problem.  Spammers then use  
webmail to send their junk.  The problem is, the spammers frequently  
also change the From: address to be an address at some other site  
(usually one of the common free mail providers).  If we do  
spamassassin scanning on the SMTP server after IMP has sent the  
mail, and the message is scored as spam, then we have 2 choices.   
Bounce mail to a likely forged From: address.  Eat the message.


Recent versions of Horde and Imp give you some options to limit the abuse.
1. you can disable that users can change the From: address
2. you can limit the number of recipients per email and per timeperiod.
3. horde logs the loginid of the sender of each message so you can disable
the account after abuse.



I'm a firm believer in "mail should never disappear", but I really  
don't like the idea of spam messages bouncing to sites from which  
they didn't actually originate, in part because it's likely to set  
off the same sort of problems the spam filtering is meant to stop.   
So, it seems that ideally, if the message is scored as spam, imp  
should fail to or refuse to send it, and give the sender an error  
saying their message could not be sent.


It looks like imp/lib/Compose.php could be hacked to pipe $msg to  
spamc -c and check the result...or am I better off just using  
$conf['mailer']['type'] = 'smtp'; and an SMTP server that can do  
content scanning during the SMTP dialog?


I would scan during the SMTP dialog, as you don't need to patch
horde/imap and once setup it will work after upgrades.







M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Tracking a webmail user

2010-03-26 Thread Michael Menge

Quoting Paul Stewart :


Hi there.



New to the list and apologize in advance if this is something I missed when
hunting around.  We do quite a bit of webhosting and run the Plesk platform
which in turn runs the IMP webmail system.



We're having a problem where on a very busy server one of the accounts for a
customer domain has been "hijacked".  Someone has gotten their username and
password.



The problem is that tailing the maillog is nearly impossible and if I tail
the access_log it shows the accesses and the remote IP address (somewhere in
Europe).  Neither of these show us the user account in use. The header of
the actual message doesn't include the username hidden anywhere neither.



Is there an easy way to track down the account in question?



In recent versions Imp (4.2) is able to Log the account and recipient
adresses. You can also limit the number of recipients per mail and
time to limit the abuse.




M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Horde/IMP performance problems

2010-09-10 Thread Michael Menge

Hi,

Quoting Jochen Roderburg :


Hello IMP Users,

We have been using the older generation of the system (Horde2/IMP3)  
for many years as our university Webmail system without needing any  
special optimizations despite a growing number of users.


But when I now tried to offer the current generation (the whole  
Horde Groupware Webmail Edition 1.2.6) to our users, we had  
immediately severe performance problems and had to cancel the action  
after 2 days.


This system now seems to have an enormously increased need of  
resources as compared to the old version.


Have others made similar experiences?


We had to optimize our system several times because of growing number
of users, changed usage (more shares) and increased need of resources
in newer horde versions. At the moment we have 42249 user in Horde
and up to 1200 concurrent sessions and 1,8 GB Database.

We are running a HA/LB cluster of two servers (2x quadcore XEON E5420
2,5GHz, 16 GB ram each)

ClusterIP is used to distribute the load between the servers.
- eAccelerator to speed up php,
- Memcache for caching,
- tempfs and Memcache for Sessions.
- PgPool is used to keep the two PostgreSQL databases in sync,
  it will eat up most of the performance gained by the second server,
  but removes the single point of failure.

Most of the tweaking was done at the database config. But as you uses
MySQL I can't help much here. Have a look at the Horde- and IMP Archives




Have you had success with the recommendations in  
horde/docs/PERFORMANCE in such a situation?


It is a good starting point. The List Archives contain some other
hints to look at. After that you have to find the bottleneck.



Does anybody have or know tools which can simulate the load of  
hundreds of IMP users in order to see the impact of changes?


I'd like to have such tools too ;-)




M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Horde/IMP performance problems

2010-09-13 Thread Michael Menge

Quoting Jochen Roderburg :


Zitat von Michael Menge :


We are running a HA/LB cluster of two servers (2x quadcore XEON E5420
2,5GHz, 16 GB ram each)

ClusterIP is used to distribute the load between the servers.
- eAccelerator to speed up php,
- Memcache for caching,
- tempfs and Memcache for Sessions.
- PgPool is used to keep the two PostgreSQL databases in sync,
 it will eat up most of the performance gained by the second server,
 but removes the single point of failure.


So even after all this tuning a single machine was not enough for the load?


A single machine would have worked for the moment, but we wouldn't have
much recources left to grow and we wouldn't have a HA system.


The idea came also already up here to use more machines with load balancing.
Is this easily possible with Horde?
ClusterIP is the additional software you need for this?


As http/https don't use persitant connections, but the client expects  
to continue at the same point you have to share all informations  
(session, cache, database) between the servers or ensure that the  
client connects to the same server.


As we couldn't find a HA and fast system to ensure shared sessions and cache.
We went the second way. Both servers share one IP-Adress. ClusterIP is  
a iptables rule which distrubutes the clients to the servers.


http://security.maruhn.com/iptables-tutorial/x8906.html
(we use --hashmode sourceip as other hashmodes will not ensure that
the same client will connect to the same server)

If the client-ip changes (e.g. DSL-reconcect / DNS Roundrobin webproxys)
it can happen that the client will be connect to an other server and
must login again, as the sessions are shared between servers.



Does this work with SSL?



Yes. But both servers should have the same Certs/Keys


Best regards,
Jochen Roderburg


--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org







M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Problems with translation and icons of four standard folders

2011-01-28 Thread Michael Menge

Hi,

Quoting Manuel Gualda Caballero :


I have two problems with four standard folders:

1.- Only one (Inbox) is translated to Spanish (Entrada). Other  
standard folders (Drafts, Junk, Sent and Trash) are not translated  
to Spanish.


2.- Only one (Inbox) shows his specific icon (inbox.png). Other  
standard folders show folder.png, instead of their own (drafts.png,  
spam.png, sent.png and trash.png).


My /usr/share/horde3/imp/locale/es_ES/LC_MESSAGES/imp.mo contains  
the msgid and msgstr of all (5) standard folders:


msgid "Inbox"
msgstr "Entrada"

msgid "Drafts"
msgstr "Borradores"

msgid "Sent"
msgstr "Enviados"

msgid "Spam"
msgstr "Spam"

msgid "Trash"
msgstr "Papelera"


The IMAP RFC 3501 only defines the INBOX as special folder. So only
this Folder has a fixed name and a special meaning. Every other folder
has a special meaning only because of the client you use
and each client use other folders by default for these special
functions.

Trash, trash, deleted objects, 

You can configure IMP which folder has which meaning. You can change  
the defaults in prefs.php. The translated strings are for the  
configuration

of these special folders.

The special icon will only be used for the folders you have configured
in IMP.

You can create folders with the spanish names and configure
IMP to use these but other clients may use other folders,



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] May be our horde installation was used for spam

2011-05-23 Thread Michael Menge

My questions:

What is the best way to find the leak? What may I configure in
horde/imp/apache/php ... to make it harder to be compromised?



There are many phishing mails which target webmail accounts.
IMHO this is the most comon case for abuse of imp and  other webmail
software

IMP has some Options to limit the impact and show the used
account. Have a look at Imp Configuration -> Other settings
-> Outgoing Email Logging

Permissions -> Imp -> max_recipients and max_timelimit

You can use the following sql-statement to show the supissius accounts

SELECT * FROM (
SELECT sentmail_who, COUNT(sentmail_recipient) AS  nrcpt FROM imp_sentmail
WHERE sentmail_ts > '@BEGIN_TS@' and sentmail_ts < '@END_TS@'
GROUP BY sentmail_who ORDER BY nrcpt DESC
) AS foo WHERE nrcpt > @NRCPT@;

Repalce
@BEGIN_TS@ and @END_TS@ with the begining and end point timestamp of  
the timeframe

@NRCPT@ with the number of recipients to ignore


To find the user you can try to search horde_prefs table for the spam  
content in the users signature (pref_scope='horde' and  
pref_name='identities' and pref_value like '%SPAMTEXT%')


Regards

  Michael Menge

M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Spam Problem ... close to a solution ... may be you could help?

2011-05-25 Thread Michael Menge

Quoting Götz Reinicke - IT-Koordinator :


Am 24.05.11 21:40, schrieb Andrew Morgan:

On Tue, 24 May 2011, Götz Reinicke - IT-Koordinator wrote:


Hi,

I did not find the compromised account yet, but I see a lot off messages
like the following one in our logs:

/var/log/httpd/ssl_request_log.1:[21/May/2011:01:10:54 +0200]
74.82.171.30 TLSv1 RC4-MD5 "POST
/horde/imp/compose.php?uniq=721hskg326yc HTTP/1.1" 92

/var/log/httpd/ssl_request_log.1:[21/May/2011:01:14:38 +0200]
74.82.171.30 TLSv1 RC4-MD5 "POST
/horde/imp/compose.php?uniq=6khanz8ousab HTTP/1.1" 92

/var/log/httpd/ssl_request_log.1:[21/May/2011:01:24:41 +0200]
74.82.171.30 TLSv1 RC4-MD5 "POST
/horde/imp/compose.php?uniq=2bcbqsb503hi HTTP/1.1" 92


May be anyone has an idea how to protect against such direct postings...
if it is possible anyway?


I'm not sure what you mean by "direct postings".  There is nothing
inherently evil about calling compose.php multiple times.


By 'direct posting' I thought about, that the spammer is not logged on
to the HORDE webpage using a webbrowser.



If the spammer is not logged in, they should not be able to send
mails at all.


I was thinking, that he uses some tool, which call
/horde/imp/compose.php


yes, but there is no way to distinguish this tool from a normal webbrowser.
Both connect to the Webserver, and send a POST-Request



In the webserver log I do have about 1.600 POST messages from that IP
... and checking some message IDs in the mailserverlog shows that there
are 100 or 200 recepiens.

And I don't think, that a spammer is sitting in Front of his webbrowser
entering such an amount of e-mail addresses.


No, this is done by script, but as Horde only sees the result
there is no way to distinguish a normal browser from a script.

Therefor limit the number of recipients per message in Horde,
and limit the number of recipients per timeframe.





M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] Fwd: E-mail address spoofing with RLO

2011-05-25 Thread Michael Menge



Quoting ANANT S ATHAVALE :


Hello,

Thanks for the info.

Regards,
ANANT.

- Message from j...@horde.org -
Date: Wed, 25 May 2011 13:55:23 +0200
From: Jan Schneider 
 Subject: Re: [imp] Fwd: E-mail address spoofing with RLO
  To: imp@lists.horde.org


So, basically what this says is, that you can't trust an email's  
sender name? Suprise. Of course IMP is affected to, any client that  
properly displays Unicode is affected.


A solution would be to ensure that horde resets the "right-to-left override"
between display name and address



Zitat von ANANT S ATHAVALE :


Dear List,

Can anybody confirm, IMP is not affected by this?

-ANANT.

  Date: Tue, 24 May 2011 18:58:19 +0200
  From: Wouter Coekaerts 
Subject: E-mail address spoofing with RLO
To: bugt...@securityfocus.com, full-disclos...@lists.grok.org.uk

E-mail address spoofing with RLO -  
http://wouter.coekaerts.be/2011/email-rlo


Introduction
=
When we reply to an e-mail, the address we see in the To-field serves
a purpose beyond getting our answer back to original sender. We attach
a meaning to these addresses. If we see john.sm...@example.com, we
expect that we're really sending a mail to someone at the Example
company.
We may have learned not to trust the "From" address: that's about as
unreliable as the return address on the back of an envelope. But we
should be careful with what we think we see in To-field too.

Problem
===
The problem comes from the unicode "right-to-left override" (RLO,
U+202E) character. It's an invisible character, that forces the text
after it to be treated as right-to-left. For example "abc[RLO]def" is
displayed as "abcfed". It's well known that these kind of characters
have security implications[1][2], it has led to other problems[3]
before, and this is a new one in that category:
It can be abused to display an E-mail address backwards, so that it
appear to be on a different domain than it actually is.

Details
===
An RLO is usually not accepted in an address, but it is accepted in
the display name. The display name and the address are often shown
together, allowing the RLO in the display name to affect how the
address is shown. For example, "Firstname Lastname [RLO]
" is displayed as "Firstname Lastname
 ".

This can not be used to spoof arbitrary addresses because the
attacker's reversed real domain is still in it. But it can be used to
spoof any domain. And a well chosen domain name reversed can look like
a convincing foreign real name in the first part of the address.
This problem is worse than spoofing of the From-addresses, because an
attacker can have a whole conversation without an indication to the
victim that he's not who (from the domain) he pretends to be.

Affected software
=
This affects most e-mail clients. These are the ones I tested, and
whose vendors have been made aware of this in 2009.
* Gmail: still vulnerable
* Hotmail: Fixed in February 2010 [4]
* Outlook 2007 (and later?): no fix announced, presumably still vulnerable
* Outlook Web Access: no fix announced, presumably still vulnerable
* Evolution: still vulnerable (Bug 601172 [5])
* KMail: Fixed since December 2009, KDE 4.2.x (never released),  
4.3.5 and 4.4.0

* And more...

1: http://unicode.org/reports/tr9/#Explicit_Directional_Overrides
2: http://unicode.org/reports/tr36/#Bidirectional_Text_Spoofing
3: http://www.mozilla.org/security/announce/2009/mfsa2009-62.html
4: http://technet.microsoft.com/en-us/security/cc308575.aspx#0210
5: https://bugzilla.gnome.org/show_bug.cgi?id=601172


Regards,

Anant Athavale.

--
Confidentiality Notice: This e-mail message, including any  
attachments, is for

the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.
--

--
IMP mailing list
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org



Jan.

--
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/

--
IMP mailing list
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org




- End message from j...@horde.org -



Regards,

Anant Athavale.

--
Confidentiality Notice: This e-mail message, including any  
attachments, is for

the sole use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copi

[imp] problem with text/plain attachments and linebreaks

2012-01-03 Thread Michael Menge

Hi,

I have the following problem. If I attach a Linux plain text file
(ASCII text with LF line terminators), send it and save the attachment
from the received mail using IMP 4.3.9, the attachment is saved as
as DOS plain text file (ASCII text with CRLF line terminators).

The File is attached as

Content-Type: text/plain;
 charset=UTF-8;
Content-Disposition: attachment;
Content-Transfer-Encoding: 7bit

which is correct AFAIK. If I don't misunderstand RFC 2046 4.1.1
the line terminators must be converted to CRLF for the text/plain
MIME-Type. I would expect that the file is converted back when it
is stored to disk on a Linux system. But I'm not sure if IMP or
the browser has to convert the file?

The browsers I tried (Firefox 7, Opera 11 and Konqueror 4) did not
change the line terminators back to LF. Saving the attachment using
Thunderbird 5 or pine, did change the line terminators back to LF,
so other mail clients handle this problem correct.

Is there a option in IMP or the browsers i did miss?

Regards

    Michael Menge






M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
IMP mailing list
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: imp-unsubscr...@lists.horde.org


Re: [imp] broken attachments with IMP 6.0.4

2013-03-06 Thread Michael Menge

Hi,

Quoting Laurent Mazet :

Apologies about my 2 last messages, I never received the answer from  
Michael (probably an issue with my MX backup), I finally found it on  
mailing list archives.


About incorrect report from the browser during uploading:
* I've done my tests from Mozilla Firefox 19 on a WinXP host


You may have been hit by a very old firefox bug.
http://cephas.net/blog/2007/01/05/firefox-mimetypesrdf-corruption/



* Can I force upload mime type to avoid this issue (from Horde or Apache)





Regards

 Laurent


Quoting Laurent Mazet  at mer., 06 mars 2013:


Hi

Does anyone else see the same issue? If, I will check if there any  
issue with an obscure PHP library dependency.


Regards,

Laurent

Quoting Laurent Mazet  at lun., 04 mars 2013:


Hi

I upgrade this morning, but the issue is still present.

# ./pear.sh upgrade -a -B -c horde
...
upgrade ok: channel://pear.horde.org/Horde_Core-2.4.0
upgrade ok: channel://pear.horde.org/Horde_ActiveSync-2.3.1
upgrade ok: channel://pear.horde.org/Horde_Compress_Fast-1.0.0

I dig into the log file; I only find this but I don't think this  
correlated as my test was done at 7:47


2013-03-04T07:40:23+01:00 WARN: HORDE [imp] PHP ERROR:  
json_encode(): Invalid UTF-8 sequence in argument [pid 21589 on  
line 242 of "/usr/local/share/horde5/pear/php/Horde/Serialize.php"]


Regards

  Laurent

Quoting Laurent Mazet  at sam., 02 mars 2013:


Hi

I found a strange bug with some specific attachments ie some PDF  
files that only use ASCII (ie byte from 32 to 128).


I think that horde use a standard text encoder to include it into  
the email. However, the encoder break lines before the 1000th  
characters by adding a carrier return. That's why Acrobat XI  
can't read it (unlike internal Gmail pdf reader).


Strangely, followed attachments are also broken. As one can see  
in this mail, I attached a compress version of a pdf file, then  
the pdf file itself and after a copy of the first compressed file.


My hode 5.0.4 install came from pear depots (I just update this  
morning). With H4/DIMP, I don't see the issue.


Regards,

 Laurent



--
Dr. Laurent Mazet   -=-  "Use the source, Luke"  -=-
ma...@softndesign.org



--
Dr. Laurent Mazet   -=-  "Use the source, Luke"  -=-   ma...@softndesign.org



--
Dr. Laurent Mazet   -=-  "Use the source, Luke"  -=-   ma...@softndesign.org


--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org







M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] Which "trash" should we use?

2013-06-13 Thread Michael Menge

Quoting Michael M Slusarz :


Quoting Arjen de Korte :


Citeren Maxime Pelletier :


Hi all,

In the process of configuring our server, we had to think about  
how to handle deleted messages. Basically, we found 4 ways:


1. Move deleted messages to a given IMAP folder (usually called "trash")

2. Mark messages as deleted but leave them in their folder

3. Move deleted messages to "Virtual trash"

4. Delete message permenantly

Obviously, #4 is rarely a good option.

However, I searched the web and I couldn't find any advice to know  
which one I should use as the default setting, or even which one I  
should force/lock. The most interesting page I found was  
http://deflexion.com/2006/05/imap-way-of-deleting-message .


I understand what is the difference between #1 and #2, but I don't  
know which one is the best alternative.


Also, could you explain me the difference between #2 and #3? To  
configure Horde as per #2, I don't check the option saying to move  
deleted messages to a given folder. And for #3, I check the same  
option, but instead of selecting an IMAP folder(which would then  
be #1), I select "Virtual trash" from the drop down list. What I  
like about #3 is that it adds a shortcut to virtual trash in the  
top section of the left sidebar, in the same section of Inbox and  
Sent.


One of my biggest concern with that setting is the compatibility  
with other mail clients (phones, tablets, Thunderbird, other  
webmail, ...). I prefer to configure my server the same way most  
of them are configured.


Thanks in advance if anyone can help me out with that


If you want to use ActiveSync, probably the only option is to use  
#1, since that's what is expected in the protocol. If not, it's a  
matter of taste and mostly depends on which clients your users are  
using right now. If you happen to use strict IMAP quota's, #2 & #3  
might be preferred (since it won't require 'extra' space for  
deleted messages).


The latter is no longer an issue if using an IMAP server that  
supports the new MOVE command.


michael


As for the difference between #2 & #3:

with the virtual trash folter option the mails are marked as deleted as
in #2, but horde does not show them in the original folder. The Virtual
trash folder is a search of all "marked as deleted" mails.
For other clients it looks like #2.

michael



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

[imp] unable to see unsubscribed folders

2015-01-20 Thread Michael Menge

Hi,

With imp 6.2.5, Horde_Imap_Client 2.26.0 I am unable to show
unsubscribed folders. Show all mailboxes will not show unsubscribed mailboxes.
Only folders unsubscribed while using "show all mailboxes" will be listed
till "hide unsubscribed mailboxes" is clicked, if "show all mailboxes"
is clicked again the unsubscribed mailbox will not reappear.

Can some one confirm this?

Regards

   Michael Menge




M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

smime.p7s
Description: S/MIME Signatur
-- 
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] unable to see unsubscribed folders

2015-02-04 Thread Michael Menge

Hi,

Quoting Michael Menge :


Hi,

With imp 6.2.5, Horde_Imap_Client 2.26.0 I am unable to show
unsubscribed folders. Show all mailboxes will not show unsubscribed  
mailboxes.

Only folders unsubscribed while using "show all mailboxes" will be listed
till "hide unsubscribed mailboxes" is clicked, if "show all mailboxes"
is clicked again the unsubscribed mailbox will not reappear.

Can some one confirm this?



i tried to debug this. Going back to imp-6.1.8 i am able
to see unsubscribed folders again.

below are the imap debugging logs for reloading the folder list
(all mailboxes) for imp 6.1.8 and 6.2.6.

The Folder Test-unsubscribe is unsubscribed and is missing
in imp > 6.1.8
As far as i can see imp / Horde_Imap_Client adds (SUBSCRIBED)
to the last LIST command





=== imap debug imp 6.1.8 ===

Wed, 04 Feb 2015 13:42:44 +
Connection to: imap://mailserv.uni-tuebingen.de:993/
Server connection took 0.0168 seconds.
S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE  
MUPDATE=mupdate://mupdate.mail.localhost/ AUTH=PLAIN AUTH=LOGIN  
SASL-IR] mailserv09.uni-tuebingen.de Cyrus IMAP Murder v2.4.17 server  
ready

C: 1 [INITIAL CLIENT RESPONSE (username: zrstes1)]
S: +
C: ==
S: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA  
NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND  
BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ SORT=DISPLAY  
THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE LIST-EXTENDED  
WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY  
MUPDATE=mupdate://mupdate.mail.localhost/ LOGINDISABLED  
COMPRESS=DEFLATE IDLE] Success (tls protection)  
SESSIONID=

Command 1 took 0.0183 seconds.
CACHE: Using the Horde_Imap_Client_Cache_Backend_Cache storage driver.

C: 2 ENABLE QRESYNC
C: 3 LIST (SUBSCRIBED) "" (* "Other Users/*" "Shared Folders/*")  
RETURN (SUBSCRIBED)

S: * ENABLED CONDSTORE QRESYNC
S: 2 OK Completed

Command 2 took 0.0008 seconds.

S: * LIST (\Subscribed \Drafts) "/" "Mail/drafts"
S: * LIST (\Subscribed \Sent) "/" "Mail/sent"
S: * LIST (\Subscribed \Trash) "/" "Mail/trash"
S: * LIST (\Subscribed \Junk \Spam) "/" "Mail/v-spam"
S: 3 OK Completed (0.010 secs)

Command 3 took 0.1623 seconds.

C: 4 LIST () "" (INBOX)
S: * LIST (\Noinferiors \Inbox) "/" INBOX
S: 4 OK Completed (0.000 secs 1 calls)

Command 4 took 0.0011 seconds.

C: 5 LIST () "" (* "Other Users/*" "Shared Folders/*")
S: * LIST (\Noinferiors \Inbox) "/" INBOX
S: * LIST (\HasChildren) "/" Mail
S: * LIST (\HasNoChildren \Drafts) "/" Mail/drafts
S: * LIST (\HasNoChildren) "/" Mail/s-spam
S: * LIST (\HasNoChildren \Sent) "/" Mail/sent
S: * LIST (\HasNoChildren \Trash) "/" Mail/trash
S: * LIST (\HasNoChildren \Junk \Spam) "/" Mail/v-spam
S: * LIST () "/" Test-unsubscribe
S: 5 OK Completed (0.360 secs 8 calls)

Command 5 took 0.3789 seconds.

C: 6 STATUS INBOX (UNSEEN)
S: * STATUS INBOX (UNSEEN 0)
S: 6 OK Completed

Command 6 took 0.0128 seconds.

C: 7 GETQUOTAROOT INBOX
S: * QUOTAROOT INBOX INBOX
S: * QUOTA INBOX (STORAGE 4 1024000)
S: 7 OK Completed

Command 7 took 0.0134 seconds.

C: 8 LOGOUT
S: * BYE LOGOUT received
S: 8 OK Completed

Command 8 took 0.0008 seconds.

=== imap debug imp 6.2.6 ===

Wed, 04 Feb 2015 13:45:31 +
Connection to: imap://mailserv.uni-tuebingen.de:993/
Server connection took 0.0145 seconds.
S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE  
MUPDATE=mupdate://mupdate.mail.localhost/ AUTH=PLAIN AUTH=LOGIN  
SASL-IR] mailserv03.uni-tuebingen.de Cyrus IMAP Murder v2.4.17 server  
ready

C: 1 [INITIAL CLIENT RESPONSE (username: zrstes1)]
S: +
C: ==
S: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA  
NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND  
BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ SORT=DISPLAY  
THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE LIST-EXTENDED  
WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY  
MUPDATE=mupdate://mupdate.mail.localhost/ LOGINDISABLED  
COMPRESS=DEFLATE IDLE] Success (tls protection)  
SESSIONID=

Command 1 took 0.0167 seconds.
CACHE: Using the Horde_Imap_Client_Cache_Backend_Cache storage driver.

C: 2 ENABLE QRESYNC
C: 3 NAMESPACE
S: * ENABLED CONDSTORE QRESYNC
S: 2 OK Completed

Command 2 took 0.0009 seconds.

S: * NAMESPACE (("" "/")) (("Other Users/" "/")) (("Shared Folders/" "/"))
S: 3 OK Completed

Command 3 took 0.0033 seconds.

C: 5 LIST "" INBOX RETURN (SUBSCRIBED)
C: 4 LIST (SUBSCRIBED) "" (* "Other Users/*" "Shared Folders/*")  
RETURN (SUBSCRIBED)

S: 5 OK Completed (0.000 secs)

Command 5 took 0.1895 seconds.

S: * LIST (\Subscribed \Drafts) &quo

Re: [imp] unable to see unsubscribed folders

2015-02-04 Thread Michael Menge

Hi,

i think I found the root of the problem
https://bugs.horde.org/ticket/13438

Quoting Michael Menge :


Hi,

Quoting Michael Menge :


Hi,

With imp 6.2.5, Horde_Imap_Client 2.26.0 I am unable to show
unsubscribed folders. Show all mailboxes will not show unsubscribed  
 mailboxes.

Only folders unsubscribed while using "show all mailboxes" will be listed
till "hide unsubscribed mailboxes" is clicked, if "show all mailboxes"
is clicked again the unsubscribed mailbox will not reappear.

Can some one confirm this?



i tried to debug this. Going back to imp-6.1.8 i am able
to see unsubscribed folders again.

below are the imap debugging logs for reloading the folder list
(all mailboxes) for imp 6.1.8 and 6.2.6.

The Folder Test-unsubscribe is unsubscribed and is missing
in imp > 6.1.8
As far as i can see imp / Horde_Imap_Client adds (SUBSCRIBED)
to the last LIST command





=== imap debug imp 6.1.8 ===

Wed, 04 Feb 2015 13:42:44 +
Connection to: imap://mailserv.uni-tuebingen.de:993/
Server connection took 0.0168 seconds.
S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE   
MUPDATE=mupdate://mupdate.mail.localhost/ AUTH=PLAIN AUTH=LOGIN   
SASL-IR] mailserv09.uni-tuebingen.de Cyrus IMAP Murder v2.4.17  
server  ready

C: 1 [INITIAL CLIENT RESPONSE (username: zrstes1)]
S: +
C: ==
S: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte  
QUOTA  NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN  
MULTIAPPEND  BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ  
SORT=DISPLAY  THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE  
LIST-EXTENDED  WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY   
MUPDATE=mupdate://mupdate.mail.localhost/ LOGINDISABLED   
COMPRESS=DEFLATE IDLE] Success (tls protection)   
SESSIONID=

Command 1 took 0.0183 seconds.
CACHE: Using the Horde_Imap_Client_Cache_Backend_Cache storage driver.

C: 2 ENABLE QRESYNC
C: 3 LIST (SUBSCRIBED) "" (* "Other Users/*" "Shared Folders/*")   
RETURN (SUBSCRIBED)

S: * ENABLED CONDSTORE QRESYNC
S: 2 OK Completed

Command 2 took 0.0008 seconds.

S: * LIST (\Subscribed \Drafts) "/" "Mail/drafts"
S: * LIST (\Subscribed \Sent) "/" "Mail/sent"
S: * LIST (\Subscribed \Trash) "/" "Mail/trash"
S: * LIST (\Subscribed \Junk \Spam) "/" "Mail/v-spam"
S: 3 OK Completed (0.010 secs)

Command 3 took 0.1623 seconds.

C: 4 LIST () "" (INBOX)
S: * LIST (\Noinferiors \Inbox) "/" INBOX
S: 4 OK Completed (0.000 secs 1 calls)

Command 4 took 0.0011 seconds.

C: 5 LIST () "" (* "Other Users/*" "Shared Folders/*")
S: * LIST (\Noinferiors \Inbox) "/" INBOX
S: * LIST (\HasChildren) "/" Mail
S: * LIST (\HasNoChildren \Drafts) "/" Mail/drafts
S: * LIST (\HasNoChildren) "/" Mail/s-spam
S: * LIST (\HasNoChildren \Sent) "/" Mail/sent
S: * LIST (\HasNoChildren \Trash) "/" Mail/trash
S: * LIST (\HasNoChildren \Junk \Spam) "/" Mail/v-spam
S: * LIST () "/" Test-unsubscribe
S: 5 OK Completed (0.360 secs 8 calls)

Command 5 took 0.3789 seconds.

C: 6 STATUS INBOX (UNSEEN)
S: * STATUS INBOX (UNSEEN 0)
S: 6 OK Completed

Command 6 took 0.0128 seconds.

C: 7 GETQUOTAROOT INBOX
S: * QUOTAROOT INBOX INBOX
S: * QUOTA INBOX (STORAGE 4 1024000)
S: 7 OK Completed

Command 7 took 0.0134 seconds.

C: 8 LOGOUT
S: * BYE LOGOUT received
S: 8 OK Completed

Command 8 took 0.0008 seconds.

=== imap debug imp 6.2.6 ===

Wed, 04 Feb 2015 13:45:31 +
Connection to: imap://mailserv.uni-tuebingen.de:993/
Server connection took 0.0145 seconds.
S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE   
MUPDATE=mupdate://mupdate.mail.localhost/ AUTH=PLAIN AUTH=LOGIN   
SASL-IR] mailserv03.uni-tuebingen.de Cyrus IMAP Murder v2.4.17  
server  ready

C: 1 [INITIAL CLIENT RESPONSE (username: zrstes1)]
S: +
C: ==
S: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte  
QUOTA  NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN  
MULTIAPPEND  BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ  
SORT=DISPLAY  THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE  
LIST-EXTENDED  WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY   
MUPDATE=mupdate://mupdate.mail.localhost/ LOGINDISABLED   
COMPRESS=DEFLATE IDLE] Success (tls protection)   
SESSIONID=

Command 1 took 0.0167 seconds.
CACHE: Using the Horde_Imap_Client_Cache_Backend_Cache storage driver.

C: 2 ENABLE QRESYNC
C: 3 NAMESPACE
S: * ENABLED CONDSTORE QRESYNC
S: 2 OK Completed

Command 2 took 0.0009 seconds.

S: * NAMESPACE (("" "/")) (("Other Users/" "/")) (("Shared Folders/" "/"))
S: 3 OK Completed

Command 3 took 0.0033 seconds.

C: 5 LIST "" INBOX RETURN (SUBSCRIBED)
C: 4 LIST (SUBSCRIBED) "" (* "Other Users/*" "Shared Fol

Re: [imp] Behavior of the virtual trash folder

2015-06-29 Thread Michael Menge


Quoting Jens Wahnes :


Hi,

some of our users are using the "Use Virtual Trash" setting in IMP's
"Deleting and Moving Messages" section and have had trouble using it
effectively.  Now I wonder how that virtual trash folder is supposed to
work.

When using that setting, messaged marked as deleted are shown in the
Virtual Trash folder and not in the regular folder, e.g. Inbox.  So
far, so good.  However, how is one supposed to permanently delete
messages with this setting turned on?  The "Purge Deleted" entry is not
shown in the "Other" menu where it is normally located when there is no
trash folder.  Also, the Virtual Trash folder has got no context menu
which would allow one to "Empty" it like one would do with the "normal"
trash folder.  In fact, unless I'm mistaken, there seems to be code to
forbid emptying the virtual trash folder (around line 290 of
imp/lib/Mailbox.php).

So how is this intended to work?  At the moment, as far as I could see,
the only way to permanently delete messages with the Virtual Trash
folder turned on is to turn it off.  Is it a bug that the "Purge
deleted" item is missing when the Virtual Trash function is turned on?
Or should there be a context menu that allows one to empty the virtual
trash?

From a user's perspective, I'd think the latter is more intuitive (when
having a Trash folder at all, I would like to be able to empty it), but
then it's probably rather difficult to implement since the Virtual
Trash seems to be a search for all messages marked as deleted, and in
order to permanently delete them all, all folders that contain at least
one deleted message would have to be expunged.


Jens


I think it is a bug (see https://bugs.horde.org/ticket/14006)
but this has not been confirmed.


M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

[imp] drafts get deleted on session timeout

2015-06-29 Thread Michael Menge

Hi,

we have discovered that auto saved new messages (drafts) get deleted  
on session timeout.
I  found the following comment https://bugs.horde.org/ticket/13108#c8  
which indicates
that the saved messaged should stay in the draft folder if log out due  
to session timeout,
but will be delete on normal (aka "user clicked on the log out  
button") log out.


We use Imp as Authentication.

horde5.2.5   stable
imp  6.2.8   stable

I tried debugging and found the following call graph

Horde_Registry->clearAuth
...
IMP_Application->logout
IMP_Compose->destroy
IMP_Message->delete

IMP_Message->expungeMailbox
IMP_imap-expunge

Can someone confirm this behavior? Is this a new bug, or did I miss  
something in my configuration?


Regards

Michael


M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] drafts get deleted on session timeout

2015-06-30 Thread Michael Menge

Hi Jan,

Quoting Jan Schneider :


Zitat von Michael Menge :


Hi,

we have discovered that auto saved new messages (drafts) get  
deleted on session timeout.
I  found the following comment  
https://bugs.horde.org/ticket/13108#c8 which indicates
that the saved messaged should stay in the draft folder if log out  
due to session timeout,
but will be delete on normal (aka "user clicked on the log out  
button") log out.


We use Imp as Authentication.

horde5.2.5   stable
imp  6.2.8   stable

I tried debugging and found the following call graph

Horde_Registry->clearAuth
...
IMP_Application->logout
IMP_Compose->destroy
IMP_Message->delete

IMP_Message->expungeMailbox
IMP_imap-expunge

Can someone confirm this behavior? Is this a new bug, or did I miss  
something in my configuration?


This is an explicit logout. If you really had a session timeout,  
there won't be any user credentials available anymore to do the  
drafts deletion.



In my test I didn't click on logout. I was in the imp  
automatic/dynamic mode, and after
an ajax request (checking for new mail) I was logged out with the  
following error message
"Ihre Sitzung hat die maximal erlaubte Dauer überschritten. Bitte  
melden Sie sich erneut an.".


Which indicates the the session is older than the max session lifetime.





M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] drafts get deleted on session timeout

2015-06-30 Thread Michael Menge


Quoting Jan Schneider :


Zitat von Michael Menge :


Hi Jan,

Quoting Jan Schneider :


Zitat von Michael Menge :


Hi,

we have discovered that auto saved new messages (drafts) get  
deleted on session timeout.
I  found the following comment  
https://bugs.horde.org/ticket/13108#c8 which indicates
that the saved messaged should stay in the draft folder if log  
out due to session timeout,
but will be delete on normal (aka "user clicked on the log out  
button") log out.


We use Imp as Authentication.

horde5.2.5   stable
imp  6.2.8   stable

I tried debugging and found the following call graph

Horde_Registry->clearAuth
...
IMP_Application->logout
IMP_Compose->destroy
IMP_Message->delete

IMP_Message->expungeMailbox
IMP_imap-expunge

Can someone confirm this behavior? Is this a new bug, or did I  
miss something in my configuration?


This is an explicit logout. If you really had a session timeout,  
there won't be any user credentials available anymore to do the  
drafts deletion.



In my test I didn't click on logout. I was in the imp  
automatic/dynamic mode, and after
an ajax request (checking for new mail) I was logged out with the  
following error message
"Ihre Sitzung hat die maximal erlaubte Dauer überschritten. Bitte  
melden Sie sich erneut an.".


Which indicates the the session is older than the max session lifetime.


Ah, this is not a session timeout caused by PHP's garbage  
collection, but enforced timeout by Horde. This should indeed not  
delete the draft and would be considered a bug, if it still does.




As I did't see anything in the Changelogs of IMP 6.2.9 and Horde 5.2.6  
i created a Ticket

https://bugs.horde.org/ticket/14035



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

[imp] message selection in imp

2015-07-20 Thread Michael Menge


Hi,

some of our users don't like how the message selection in imp is  
currently handled.


If you click on es message to view it, the current selection is reset  
and the message gets selected.

The following three "issues" are reported.

1. If you want to delete/move multiple other mails you have to  
remember to deselect the message.


2. There is no way to view a mail without deselecting all selected  
mails. (e.g. you have selected
some mails to delete them, and you want to check one mail if it should  
be deleted or not.)


3. If you miss the selection box, your selection is reset.


One possible solution to these problems would be to make the message  
view independent from

the message selections.

Before I create a new feature request I would like to discuss the pro  
and cons, and

check if such a feature request  would have a chance to be accepted.


Regards

Michael


M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] message selection in imp

2015-07-20 Thread Michael Menge


Quoting Andy Dorman :


On 07/20/2015 03:10 AM, Michael Menge wrote:


Hi,

some of our users don't like how the message selection in imp is
currently handled.

If you click on es message to view it, the current selection is reset
and the message gets selected.
The following three "issues" are reported.

1. If you want to delete/move multiple other mails you have to remember
to deselect the message.

2. There is no way to view a mail without deselecting all selected
mails. (e.g. you have selected
some mails to delete them, and you want to check one mail if it should
be deleted or not.)

3. If you miss the selection box, your selection is reset.


One possible solution to these problems would be to make the message
view independent from
the message selections.

Before I create a new feature request I would like to discuss the pro
and cons, and
check if such a feature request  would have a chance to be accepted.





I have a couple of questions about how you would want the selection  
process to changed...


1. If you want to delete/move multiple other mails you have to  
remember to deselect the message.


So, if you have a message selected and you want to select another to  
read, how would you do it?  The expected behavior is that the  
selected email is the one that is viewed.  So you want to be able to  
select a specific email and it NOT be displayed?


In that case you would need another action to tell the system to  
actually display the selected email, roughly doubling the actions  
needed to read your email and that is NOT something we would support.


Or perhaps I do not understand. ;-)



I should explain my idea a bit more.

If you click on the from, subject, date or size of es message the  
message is displayed like now,
but the selection (checkbox) is not changed. You can change the  
selection by clicking on the ceckbox

like now.

If no message is selected but one is shown (preview) actions like  
delete should work on the shown message.




2. There is no way to view a mail without deselecting all selected
mails. (e.g. you have selected some mails to delete them, and you
want to check one mail if it should be deleted or not.)




I simply delete the group above or below the email I have a question  
about and then select the email I want to read...two clicks...Every  
email client I have ever used works this way.  I think changing Imp  
to require MORE user actions to manage their email is the wrong way  
to go.




It think it woule require less actions as you can continue to select messages
without deleting the first group


3. If you miss the selection box, your selection is reset.


This one really confused me...so I logged in and tried to reset a  
group I was selecting.


I was at first unable to do what you describe as follows:

1. I selected an email by clicking anywhere on the row containing  
the Selection check box - From - Subject - Date - Size.


2. Then I held down the Shift key (Shift+select and Ctrl+select have  
been GUI standards for inclusive and exclusive list selections  
respectively for over 30 years)


3. Then tried to somehow reset the group by clicking anywhere in the  
email list and I could not loose the selection.


Eventually I figured out that if you do NOT follow GUI standards to  
hold down the Shift key to indicate an "inclusive" multi-select,  
then the interface correctly sees your selection request as NOT a  
multi-select and behaves as it should.


Again, I may not understand and if I miss your point then I apologize.



You can change the selection of mails by clicking on the ceckbox without
pressing Shift or Ctrl. So "issues" 3 can be solved by always using the
Ctrl  key. But I guesse some of my users don't know the GUI standards or
are too lazy to eep pressing Ctrl.


regards

   Michael





M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] message selection in imp

2015-07-21 Thread Michael Menge


Quoting Jens Wahnes :


On Mo, Jul 20 2015, at 19:59:02 +0200, Michael Menge wrote:


If no message is selected but one is shown (preview) actions like delete
should work on the shown message.


Maybe you can convince your users to double-click such a message first.
When it is shown in a new window, the delete button inside that window
always works on that one message.

(If your users are in any way like ours, you'll have a few that are
complaining very loudly, but can be taught how to do work around a
problem.  Then, of course, some don't want to work around a problem but
insist that the program should behave the way they want.)


We recently switched from horde 3.3 to horde 5.2, so the new dynamic interface
is new to our users. On the one hand, there are always users that  
don't like the

changes and want to keep the old. On the other hand, the reports indicate that
the horde/imp did not work in the way they expected.

I don't know if there is a majority of users that expected the selection
to work different, as only few users will report such problems. But if it
would be possible to change horde that it works in the way these users expect
it to work without breaking how the the other users expect horde to work
it could improve the GUI. But I don't know if it is possible or not.

Given some time the users will learn to work around and get used to  
how horde works.





You can change the selection of mails by clicking on the ceckbox without
pressing Shift or Ctrl. So "issues" 3 can be solved by always using the
Ctrl  key. But I guesse some of my users don't know the GUI standards or
are too lazy to eep pressing Ctrl.


When setting these checkmarks, one thing to do is to watch more closely
before clicking on the pseudo-checkbox.  Only when the green box with
the checkmark is displayed below the mouse cursor, one is in "checkbox
mode" where clicking sets just this one checkbox and leaves all others
as were.  Otherwise, one is in "SAA mode" and needs to use the modifier
keys (Shift and Control) to do selections.  However, AFAICT, there is
no guidance to tell whether or not one is in "checkbox mode" when
removing checkmarks.


Jens





M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] message selection in imp

2015-07-21 Thread Michael Menge


Quoting Jens Wahnes :


Michael Menge wrote:


We recently switched from horde 3.3 to horde 5.2, so the new dynamic
interface
is new to our users. On the one hand, there are always users that don't
like the
changes and want to keep the old. On the other hand, the reports
indicate that
the horde/imp did not work in the way they expected.


Very similar situation here.  With any luck, you might also have  
users that are so such much used to mails being spread out to  
"pages" that after the switch to dynamic mode, they mistakenly  
delete their whole Inbox because the special "check all mails"  
checkbox in the table heading really checks alle mails, even those  
not on the current "page".  At least, that's what we have been  
experiencing a couple of times.




Yes! We did expect it, and it happened quit a few times in the first week,
but much less often now. And cyrus unexpunge feature is helping great keeping
the work to restore the mail to a minimum.



I've been thinking that it might be a good idea to have an option to  
define a threshold such that if one attempts to delete more than X  
mails at once, there is a warning like "You are about to delete Y  
emails to once. Are you sure you want to continue?".  However, I  
really don't know if that warning would actually be read.  Maybe  
others can comment on that, too.



I don't know if there is a majority of users that expected the selection
to work different, as only few users will report such problems. But if it
would be possible to change horde that it works in the way these users
expect
it to work without breaking how the the other users expect horde to work
it could improve the GUI. But I don't know if it is possible or not.


I don't really see a good way how this could be gracefully handled  
in the dynamic GUI.  The next best solution I can think of would be  
to tackle the "deselection" problem I mentioned before, e.g. the  
pseudo-checkbox could be displayed using a different color when one  
is about to deselect a message.


this should be possible with css





M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

Re: [imp] IMAP sessions not starting correctly

2015-11-25 Thread Michael Menge

Hi Jens,

Quoting Jens Wahnes :

We're using Horde along with the IMAP Proxy originally developed for  
the Squirrelmail project.  While this works out quite well most of  
the time, there are, however, occasional problems with IMAP sessions  
not working properly.  In the IMAP proxy's log file, there would be  
a line reading "IMAP_Line_Read(): connection closed prematurely".   
Since we were not able to forcefully produce this behavior, it has  
always been hard to debug.


Some time ago, we got "lucky" and this happened on one of our test  
systems as well.  Before, it had only occured on the "production"  
server, where Horde's debug level is lower and we cannot experiment  
like we can on the test system.  I had always considered this to be  
a problem of the IMAP proxy, but now it seems to me it might be  
Horde's IMAP client causing this.  However, it's still very  
difficult to see what actually is the cause of this - I couldn't  
really find a way to debug this.  Maybe someone can give me a hint?


When the problem occured, I did several tests on the system to rule  
out different areas where the problem might be located.  For one,  
restarting the IMAP proxy didn't help.  Also, the problem did  
persist through the reload/restart of the Apache server running  
Horde, so it can't be some strange bug with the opcode cache or  
something like that.  Thirdly, the problem did not occur when using  
(a) another browser from the same PC to connect to Horde using  
another username to login and (b) using the same username as before  
to login.  So it seems the problem is somehow tied to a specific  
session within Horde.


...

Any suggestions on how to further investigate this problem would be  
very much appreciated.




We have seen a similar problem on our servers that might be related:
We have sporadic cases where user are able to login to horde, but
are than unable to access there mails in IMP because
"Mail server denied authentication". We use IMP for Horde Authentication,
and on the Log-files we see one successful login followed by many faild
logins.  We are pretty sure that the user didn't change password in between.
So we suspected that the password was not stored correct in the session,
got somehow corrupted or horde is unable to retrieve/decode the  
correct password.


We use horde_hashtable with Redis as session storage. But we had to  
disable session
tracking because of performance impact, so i was unable to take a  
closer look at the

problematic session.

Software
Mailserver: Cyrus IMAP v2.4.17 (Murder configuration)

Webmailer: php-5.4.16-36.el7_1.x86_64
   horde5.2.8
   imp 6.2.11
   Horde_HashTable  1.2.3
   Predis   1.0.3

Redis-Server redis-2.8.19-2.el7.x86_64



M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

[imp] Interest in Sponsoring "S/MIME signing and decryption using browser APIs"

2016-07-12 Thread Michael Menge

Hi,

At the moment cryptographic signing and decryption of mails with imp requires
that the private key is stored on the web server.

Some years ago there was a attempt to implement S/MIME signing with  
browser capabilities
for firefox (https://bugs.horde.org/ticket/2782). But the  
implementation wasn't included

in IMP.

In the meantime there are projects to standardized the APIs

"Javascript Object Signing and Encryption (jose)"
https://datatracker.ietf.org/wg/jose/documents/

"Web Cryptography API"
https://www.w3.org/2012/webcrypto/

Is there anyone else that would be willing to help to fund

   "S/MIME signing and decryption using browser APIs"

@horde devs how much money would be needed to implement using these APIs?
and how long would it take?

Regards


Michael







M.MengeTel.: (49) 7071/29-70316
Universität Tübingen   Fax.: (49) 7071/29-5912
Zentrum für Datenverarbeitung  mail:  
michael.me...@zdv.uni-tuebingen.de

Wächterstraße 76
72074 Tübingen

--
imp mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: imp-unsubscr...@lists.horde.org

[imp] mimp login problems

2007-03-21 Thread Michael Menge

Hi,

we are running horde 3.1.3, mimp H3 1.0 and imp H3 4.1.3
Authentication is done by IMP or MIMP depending if its
a mobile client or not.

If a PDA tries to login it is redirectet to the mimp login page.
If he enters the correct username and password, the loginpage shows up  
agin without an error message over and over again.


But if the users enter a wrong passord once, the loginpage shows an  
errormessage. If he enters the correct username and password after that

it works all like it should.

We discoverd that the first time
the log showed  
/mimp/login.php?Horde=b01023815cddea9eb9d1f0192b622bec&url=%2Findex.php%3FHorde%

3Db01023815cddea9eb9d1f0192b622bec%26amp%3Bnocache%3D1sk44te32ri8

after the error it looked like this.
/mimp/login.php?imapuser=xx&Horde=b56de5591432628e2c939bff1cca2112&logout_r
eason=failed

We think the parameter amp and/or nocache are making the trouble. But  
we could not discover where we could switch these parameter of.


regards

  Michael Menge


M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] WG: Clearing Subject line memorized messages

2007-05-10 Thread Michael Menge

Hi,

i think this is a feature of your browser to fill forms. Where to  
delete these data depends on your browser. Till now i have only seen  
the posibility to delete ALL data, but not to select the data to delete.



Regards

  Michael

Quoting Jan Schneider <[EMAIL PROTECTED]>:




- Weitergeleitete Nachricht von [EMAIL PROTECTED] -
 Datum: Wed, 09 May 2007 22:39:28 -0700
   Von: [EMAIL PROTECTED]
   Betreff: Clearing Subject line memorized messages
An: [EMAIL PROTECTED]

I wonder if you can help me. The Subject Line automatically remembers
previously used subjects -- and sometimes that's a convenience. (Click
on the u in Subject, and the whole list shows.) How do I erase them

from the memory if I don't want them on there anymore?

Thanks!
- Wendy Hughes
CFI West



- Ende der weitergeleiteten Nachricht -


Jan.

--
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/





M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] SMIME Opaque Sign+Encrypted Messages cannot be displayed

2007-06-04 Thread Michael Menge

Hi,

this may be connected to http://bugs.horde.org/ticket/?id=4297.
I tried to debug this bug and found that it is only a problem in
displaying.

what was the MIME structure of the E-Mail?


Quoting Harakiri <[EMAIL PROTECTED]>:


The following problem occures with

imp 4.1.4
horde 3.1.4


An SMIME signed+encrypted message will be successfully
decrypted and verified however no text will be shown
only :

"There are no parts that can be displayed inline."

The message is just a simple text message.

The text part will be shown however, when clearsigned
+ encrypted is used.

For reference :

SMIME opaque = results in a message with p7m 1 part
SMIME clearsigned = results in a message with original
text and signature part

if the opaque part is encrypted after signing, imp
does not show any text - the same mail however works
fine in thunderbird.






No need to miss a message. Get email on-the-go
with Yahoo! Mail for Mobile. Get started.
http://mobile.yahoo.com/mail
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]






M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] problem with the reminders.php

2007-06-25 Thread Michael Menge

Hi,

we have the same problem see Bug #5240 and Bug #3046


Quoting LEVEAU Stanislas <[EMAIL PROTECTED]>:


Hi,


I've got a problem with the reminders.php

which is launched every 5 minutes by cron

Every 70 minutes, reminders.php is abnormally long : more than 5
minutes, so the following one begins to run while first is not ended.

and it takes all the CPU :

2946 root 65080 *98,6 * 1,5   6:14   2 /usr/bin/php -q
/usr/share/horde3/kronolith/scripts/reminders.php

do you have an idea?

regards
Stan
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]






M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] Removing Country Flags

2007-08-28 Thread Michael Menge

Hi,

in horde/lib/Horde/NLS.php it checks if the flag icon exist in  
horde/themes/graphics/flags so you could disable this check, or

remove the icons. But i don't know in which other places these icons are used.



Quoting Dale Britt <[EMAIL PROTECTED]>:


Hi

Does no one know how to remove the country flags?

This is becoming a pain to us because it shows the flag of the country where
are server is not where the client is.

I would appreciate some direction as I tried searching Google, horde.org and
with no results

Dale


- Original Message -
From: "Dale Britt" <[EMAIL PROTECTED]>
To: 
Sent: Sunday, August 26, 2007 12:31 PM
Subject: [imp] Removing Country Flags



Hello

We have client's complaining about the country flags, how do we remove
them globally.

Many thanks

Dale
--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


---
Filter service subscribers can train this email as spam or not-spam here:
http://my.email-as.net/spamham/cgi-bin/learn.pl?messageid=184E48F2540E11DC8D6B46A328E2B2ED



--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]






M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] Go to next unread, when threaded

2007-09-26 Thread Michael Menge



If you use Virtual Inbox you will see only unread mails


Quoting Phil Reynolds <[EMAIL PROTECTED]>:



Is there a way, when reading mail in IMP in threaded mode, to go to
the next unread mail? It is possible to go to the next mail but that
seems to include the read ones.

--
Phil Reynolds
  o   mail: [EMAIL PROTECTED]
|L_ \  / Web: http://www.tinsleyviaduct.com/phil/
(_)- \/  Waltham 66, Emley Moor 69, Droitwich 79, Windows 95

--
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]






M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] Go to next unread, when threaded

2007-09-27 Thread Michael Menge

Quoting Phil Reynolds <[EMAIL PROTECTED]>:



Quoting Michael Menge <[EMAIL PROTECTED]>:




If you use Virtual Inbox you will see only unread mails


Yes, but that's across all polled folders. Is there any way to achieve
this within a folder?



Yes you can search for unread mails in a folder. And if you need this  
often save this as a virtual folder.




M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]

Waechterstrasse 76
72074 Tuebingen


smime.p7s
Description: S/MIME krytographische Unterschrift
-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]


Re: [imp] mark as read on delete (move to trash)

2008-02-28 Thread Michael Menge
Hi,

don't check your trashfolder for new mail and it won't show up in your
"virtual inbox"



Quoting Mark Richardson <[EMAIL PROTECTED]>:

>
>
>   Hi I would like to know if there is a way to make horde mark   
> messages as read when deleting them via the move to trash route ?
>
>I find the Virtual Inbox thing very handy, but unfortunately when  
>  deleting some messages I always need to  delete them from trash as   
> well (or mark them as seen) to remove them from my view.
>
>   It would be great if they just got out of sight on delete, when I   
> run out of space I can always hit empty trash.
>
>   Thanks
>
>




M.Menge Tel.: (49) 7071/29-70316
Universitaet Tuebingen  Fax.: (49) 7071/29-5912
Zentrum fuer Datenverarbeitung  mail:  
[EMAIL PROTECTED]
Waechterstrasse 76
72074 Tuebingen

-- 
IMP mailing list - Join the hunt: http://horde.org/bounties/#imp
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [EMAIL PROTECTED]