Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: dessex on March 11, 2004, 07:15:51 PM

Title: Squirrelmail 1.4.2 (stable)
Post by: dessex on March 11, 2004, 07:15:51 PM

I currently have Squirrelmail 1.4.2 (Stable) running in an iBay on SME 6.0 (Final).  Everything seems to be working well.  However, what concerns should I have running smail out of an iBay?

Title: Squirrelmail 1.4.2 (stable)
Post by: Derek L on March 11, 2004, 10:49:44 PM

In terms of functionality...none. Been doing it in a production environment since Squirrelmail 1.2.8. Permissions are another story though.

Title: Squirrelmail 1.4.2 (stable)
Post by: dessex on March 12, 2004, 04:19:42 PM

What type of permission problems have you had.  Thanks.

Title: Squirrelmail 1.4.2 (stable)
Post by: Derek L on March 12, 2004, 11:45:37 PM

I haven't had any permissions problems per se, but Squirrelmail in an ibay just isn't particularly secure. The members of the group that has read/write permissions to the squirrelmail ibay, (which may be the "Everyone" group), have full access to the folder structure through samba. Also, if you have FTP enabled on your server, the folder structure of the ibay will be accessible that way too. It's not a huge concern for me at my workplace, (small shop), but if you are really security conscious, you may want to modify things to tighten it up a bit.

Title: Squirrelmail 1.4.2 (stable)
Post by: dessex on March 13, 2004, 12:43:53 AM

Thanks!