SVN 280 - "TFTP " in a subject creates error.

[jrmy]

Not sure what is going on but if I include "TFTP " in the subject of an email, it looks like Roundcube attempts to access the root of the server. I receive a 403 Forbidden error.

Forbidden
You don't have permission to access / on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

I will also add that there must be a space after TFTP or it will not produce the error.

[bogg]

Works just fine here, must be something with your setup (?)

[jrmy]

Must be.


Could you try and rename your .htaccess file in the root of the roundcube directory and then try?

[bogg]

Originally Posted by jrmy

Must be.


Could you try and rename your .htaccess file in the root of the roundcube directory and then try?

Tried and also worked fine for me.

[jrmy]

Hmmmmm

It must be an apache or php setting somewhere. But I am more confused as to why it would do it at all. I can't see why there would be anything special about "TFTP ".

Oh yeah, and you are adding the space after TFTP correct?

[bogg]

Yes, made sure to add it afterwards.

tried these variants:

"TFTP "
"TFTP hejsan"
"hejsan TFTP "

All seemed to work.

[jrmy]

Well this is sure strange. I am going to assume it has to do with something my host has running. Maybe they have mod_secure enabled and that is causing it.

[Jester]

Yea, its possible that mod_security has some strict rules on.
When mod_security detects something it doesnt like, it will usually send a forbidden or service unavliable.