p dont think | 1 Feb 2005 03:57

Vacation Testers Needed

All,

  A security flaw has been identified in the (local) vacation plugin
(currently version 0.15,
http://www.squirrelmail.org/plugin_view.php?id=51), not to mention the
fact that it is sorely out of date and contains some very dirty code.  I
am currently working through a thorough code audit and makeover and am
hoping to get some testers for it some time in the next several hours,
as the security problem has already been published and a new version
needs to be released ASAP.  Anyone using this plugin who is willing to
test the new version, please get in touch.

Thanks,

 Paul

-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
--
squirrelmail-users mailing list
Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: squirrelmail-users <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

(Continue reading)

SM-Development | 1 Feb 2005 04:33
Picon

Re: (no subject)

Hi Paul & List

>> Also, can the HTML Mail make the mail to appear to two portions, just
like the MS Outlook, comprising of one section of plain-text and
another
>> section of HTML rich message, so that if the recipient's MUA can
support
>> it, the HTML rich version will be displayed.
>
> Up and coming.

Just can't sit still for the release ... any date yet?

Thanks.

>
>   - paul
>

***************************************************************
CAUTION: This e-mail is confidential and may contain privileged
information.   If you are not the intended recipient,  you must
not  disclose or use the information. If you have received this
e-mail in error,  please  notify  by  returning  the e-mail and
delete the document.   Any views expressed message are those of
the individual sender,  and  may  not  necessarily  reflect the
views of the Company.
***************************************************************

-------------------------------------------------------
(Continue reading)

Brad Donison | 1 Feb 2005 05:18
Picon

Re: Image Button Alignment Problem

Marco Belmonte wrote:
> Hi,
>
> I'm wondering if anyone knows why the Image Button Plugin renders
> perfectly in Firefox and won't work in Internet Explorer 6? What I mean,
> is that in Firefox the buttons will wrap if there are more then the
> browser window can put all on one line and in IE they won't wrap and so
> the buttons force the browser scrollbar to be used - which is not only
> ugly but difficult for the users to navigate. I realize that this is
> probably a Microsoft problem but just like The Devil - its problems seem
> to become my problems at some point ;-) <wink>
>
> Of course, there is always a good chance that I did something wrong - in
> which case I'm very open to correction. Any hints would be appreciated.
>
> Thanks in advance!

Ya I've seen that non-IE browsers know how to rap, but not IE;-) I use the
mail utilities plugin to removed items from the main menu line and bring
them down to a second level and that helps.

<http://squirrelmail.org/plugin_view.php?id=113>

Regards,

Brad
--
Last time I had this much fun was, ... uh ...

-------------------------------------------------------
(Continue reading)

Barry Wong | 1 Feb 2005 12:10
Picon

Re: Vacation Testers Needed

p dont think wrote:

>All,
>
>  A security flaw has been identified in the (local) vacation plugin
>(currently version 0.15,
>http://www.squirrelmail.org/plugin_view.php?id=51), not to mention the
>fact that it is sorely out of date and contains some very dirty code.  I
>am currently working through a thorough code audit and makeover and am
>hoping to get some testers for it some time in the next several hours,
>as the security problem has already been published and a new version
>needs to be released ASAP.  Anyone using this plugin who is willing to
>test the new version, please get in touch.
>
>Thanks,
>
> Paul
>  
>
Dear Paul, I would be happy to help out. Please let me know what you
need me to do.

-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
--
squirrelmail-users mailing list
Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
(Continue reading)

p dont think | 1 Feb 2005 12:29

Re: [SM-USERS] Vacation Testers Needed

>> A security flaw has been identified in the (local) vacation plugin
>>(currently version 0.15,
>>http://www.squirrelmail.org/plugin_view.php?id=51), not to mention the
>>fact that it is sorely out of date and contains some very dirty code.  I
>>am currently working through a thorough code audit and makeover and am
>>hoping to get some testers for it some time in the next several hours,
>>as the security problem has already been published and a new version
>>needs to be released ASAP.  Anyone using this plugin who is willing to
>>test the new version, please get in touch.
>>
> Dear Paul, I would be happy to help out. Please let me know what you
> need me to do.

Install and test this plugin.  Note the requirements.  This is for
systems with local users (not virtual) and the vacation binary intalled
only.

Thanks,

 Paul

Attachment (vacation_local-1.0-1.4.tar.gz): application/octet-stream, 30 KiB
p dont think | 1 Feb 2005 14:19

Re: (no subject)

>>>Also, can the HTML Mail make the mail to appear to two portions, just
> 
> like the MS Outlook, comprising of one section of plain-text and
> another
> 
>>>section of HTML rich message, so that if the recipient's MUA can
> 
> support
> 
>>>it, the HTML rich version will be displayed.
>>
>>Up and coming.
> 
> 
> Just can't sit still for the release ... any date yet?

Technical problems hold it up.  I can't promise a date yet but am trying 
to move it up on my list.

-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
--
squirrelmail-plugins mailing list
Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: squirrelmail-plugins <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
(Continue reading)

p dont think | 1 Feb 2005 14:58

Re: Outgoing mail filter

> I have hosted a free web-based squirrelmail e-mail service for a few
> years, without any problems, however got my first incident of a spammer
> using my system a few days ago. It turned bad, and I am already in
> multiple block lists...

That's too bad.  I'm amazed... did the spammer actually sit there and
send out thousands of messages one at a time?!?  Talk about ridiculous.
 You can limit number of recipients and so forth with this plugin:

http://www.squirrelmail.org/plugin_view.php?id=213

Otherwise, you don't "catch" outgoing emails with procmail in SM at all.
 As others have suggested, you have to take care of outgoing scans with
your MTA.  Good luck,

Paul

> I want the service back up again, but for that I need to be able to
> filter outgoing messages for spam and viruses. I would like the ability
> to use procmail for filtering as it makes it easier to add new filter
> tests adding rules for spamassassin, clamav, and so on dirrectly in the
> procmail script. 
> 
> If content is not accepted, procmail can also notify the server admin
> with the violating content, freeze the account for review, and even
> block the violators ip in case he tries sending again from same ip with
> a different account.
> 
> The only thing I need is thus a plugin to intercept the outgoing
> messages with procmail. 
(Continue reading)

Alexandros Vellis | 1 Feb 2005 16:21
Picon

Re: color coding using IMAP labels?

On Σαβ, 2005-01-29 at 16:23 -0500, Daniel M. Drucker wrote:
> Is there a plugin - or demand for one - that will color-code based on 
> IMAP labelling (the 'ANNOTATE' and 'ANNOTATEMORE' capabilities)? I'd 
> like to see the labels I assign in Thunderbird show up in Squirrelmail.

I believe there isn't, and it is indeed a very good project for someone
to work on. And not just for labels, ANNOTATE{MORE} extensions are very
useful overall to store server-side meta-data. For instance, instead of
writing different preferences items in squirrelmail preferences backend
for the sorting method of a folder, they could be written on the IMAP
server, and in theory, could be used by other IMAP clients as well.

However, bear in mind that different IMAP clients use different ANNOTATE
keywords / namespaces  (whatever they are called), and interoperability
is not guranteed.

That said, do you know of a document somewhere that describes the
Mozilla Mail / Thunderbird keywords, or any other client's keywords? I
tried googling for it and couldn't find anything useful.

Alexandros

-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
--
squirrelmail-plugins mailing list
Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
(Continue reading)

p dont think | 1 Feb 2005 21:40

Re: color coding using IMAP labels?

>>Is there a plugin - or demand for one - that will color-code based on 
>>IMAP labelling (the 'ANNOTATE' and 'ANNOTATEMORE' capabilities)? I'd 
>>like to see the labels I assign in Thunderbird show up in Squirrelmail.
> 
> I believe there isn't, and it is indeed a very good project for someone
> to work on. And not just for labels, ANNOTATE{MORE} extensions are very
> useful overall to store server-side meta-data. For instance, instead of
> writing different preferences items in squirrelmail preferences backend
> for the sorting method of a folder, they could be written on the IMAP
> server, and in theory, could be used by other IMAP clients as well.
> 
> However, bear in mind that different IMAP clients use different ANNOTATE
> keywords / namespaces  (whatever they are called), and interoperability
> is not guranteed.
> 
> That said, do you know of a document somewhere that describes the
> Mozilla Mail / Thunderbird keywords, or any other client's keywords? I
> tried googling for it and couldn't find anything useful.

Agreed, I'd be interested to see some work on this.  It could probably 
be added to the highlighting code w/out much trouble if it were actually 
corified.  It'd be most useful if we could create a framework for 
retrieving attributes in a generic way that assumes nothing about the 
attributes, and then make them available to the core or any plugin that 
wants to sort thru them and/or modify them.  Marc may want to comment on 
the merits of making this core or not (cc'ing him).

  - paul

-------------------------------------------------------
(Continue reading)

Marc Groot Koerkamp | 1 Feb 2005 22:17
Favicon

Re: color coding using IMAP labels?

>>> Is there a plugin - or demand for one - that will color-code based on
>>>  IMAP labelling (the 'ANNOTATE' and 'ANNOTATEMORE' capabilities)? I'd
>>>  like to see the labels I assign in Thunderbird show up in
>>> Squirrelmail.
>>>
>>
>> I believe there isn't, and it is indeed a very good project for someone
>>  to work on. And not just for labels, ANNOTATE{MORE} extensions are
>> very useful overall to store server-side meta-data. For instance,
>> instead of writing different preferences items in squirrelmail
>> preferences backend for the sorting method of a folder, they could be
>> written on the IMAP server, and in theory, could be used by other IMAP
>> clients as well.
>>
>> However, bear in mind that different IMAP clients use different
>> ANNOTATE
>> keywords / namespaces  (whatever they are called), and interoperability
>> is not guranteed.
>>
>> That said, do you know of a document somewhere that describes the
>> Mozilla Mail / Thunderbird keywords, or any other client's keywords? I
>> tried googling for it and couldn't find anything useful.
>
> Agreed, I'd be interested to see some work on this.  It could probably
> be added to the highlighting code w/out much trouble if it were actually
> corified.  It'd be most useful if we could create a framework for
> retrieving attributes in a generic way that assumes nothing about the
> attributes, and then make them available to the core or any plugin that
> wants to sort thru them and/or modify them.  Marc may want to comment on
> the merits of making this core or not (cc'ing him).
(Continue reading)


Gmane