From: j debert on
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

mouss さんは書きました:
>
> you mean things like
> GET /roundcube-0.2//bin/msgimport
> GET /round//bin/msgimport

Not lately.

Most recently, they're looking for version info:
GET /rc/README
GET /webmail/README
GET /roundcube/README
GET /rcube/README
.
.
.
GET /roundcubemail/README
GET /roundcube/CHANGELOG
etc.

and not so recently:
GET /webmail/program/js/list.js
GET /roundcube/program/js/list.js
etc.

Some of the same IPs also probe port 25, connecting then disconnecting
w/o talking to the server. I don't think they like Postfix.

==
jd
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)

iD8DBQFLZ1bChpL3F+HeDrIRAkCAAJ9HG9o4eI04VGV7lZF8Wp1kuN/MiACgg0qB
+W64ICtOaIlcIovhHAre/ds=
=hkCP
-----END PGP SIGNATURE-----

From: LuKreme on
On 1-Feb-2010, at 13:39, Stan Hoeppner wrote:
>
> Carlos Williams put forth on 2/1/2010 10:04 AM:
>
>> I recommend and prefer Roundcube.
>>
>> http://roundcube.net/
>
> +1
>
> If you're going to offer webmail, you may as well offer IMAP folders instead of POP. JMHO.

Yeah, I have to say I don't even understand how webmail+POP3 makes any sense at all.

> I'm an ex Squirrelmail user and switched to Roundcube, mainly for the nicer user interface.

I ran a tesbed of Roundcube for my users and while the interface is *much* nucer than SquirrelMail, it has proven to be extremely flakey at a massive memory hog. Maybe things have improved with the 0.3.x version, but I finally had to dump it because it kept causing PHP and Apache to throttle.

> Other than Roundcube, for a really nice modern AJAX interface, take a look at SOGo. The thing that really impresses me is the right click context menus like those available in Thunderbird or other GUI mail clients.

Thanks for that, I'll take a look at it.

--
And now, the rest of the story

From: Stan Hoeppner on
Charles Marcus put forth on 2/1/2010 4:17 PM:
> On 2010-02-01 4:05 PM, Stan Hoeppner wrote:
>> My Roundcube package is currently up to date, and it is a standard
>> Debian package:
>>
>> [02:21:52][root(a)greer]/$ aptitude show roundcube
>> Package: roundcube
>> New: yes
>> State: installed
>> Automatically installed: no
>> Version: 0.2.2-1~bpo50+1
>
> Eh? 0.3.1 is the current version, so how is 0.2.2 'up to date'?

The current discussion relates to keeping security patches current.

http://www.debian.org/security/

All security flaw related new code is back ported and stable versions patched.
You seem to be of the mistaken impression that one must have the latest 'release
version' of a software package to have the latest security patches. This is not
true of any *nix distro or Windows for that matter. Heck, M$ is still sending
out security patches via automatic updates to Windows 2000 machines (until June
10 apparently).

If there is a security flaw identified in the version of Roundcube I'm running
(or any package), at some point a patched version will be made available in the
security repository. Automated or manual upgrades via apt or aptitude will pull
down the patched package and install it.

--
Stan

From: Stan Hoeppner on
Ralf Hildebrandt put forth on 2/1/2010 4:31 PM:

> That's probably some sort of twisted Debian humor .)

I wish it was humor... Debian Stable always lags pretty seriously behind the
cutting edge release versions of a lot of packages. Then again, from what I
understand, so do RHEL, CentOS, SLES, and some others. This seems indicative of
"Stable" or "Enterprise" releases. The "stability" vs "features" argument, I
assume.

When testing is pushed to stable (not sure of the target date), I'll end up with
Roundcube 3.1 after upgrading.

All of that said, I don't find I'm lacking any functionality with my current
version of Roundcube.

--
Stan

From: Gary Smith on
> > http://roundcube.net/
>
> +1
>
> If you're going to offer webmail, you may as well offer IMAP folders instead
> of
> POP. JMHO.
>



I think it depends upon the requirements. For very simple mail and setup, +1 roundcube. I have been using horde for some time for my clients (as they use more of the calendaring stuff than anything) so if you need something a little more advanced, use +1 horde.

Of course, you could offer both (which we do). For some clients, horde is too much, for others roundcube isn't enough.