Recent posts
#1
Theme Releases / Re: Elastic Extensions: elasti...
Last post by rjbrenesf - Today at 11:39:38 AMQuote from: rjbrenesf on Today at 11:32:18 AMHi Roundcube Community!
We want to share two custom enhancements designed for the standard **Elastic** skin. These modifications optimize screen space and modernize the layout for desktop users.
Both projects are a collaborative effort between **wd4u** and **Gemini**. Here are the details of what each extension does:
---
### 1. elastic-g-plus
This modification reworks the desktop interface to maximize your workspace by streamlining navigation.
* **Streamlined Menu:** Replaces the full default text-heavy menu blocks with clean, compact icons in the header.
* **Header Enhancements:** Adds a clean logo and the current date directly to the header area.
* **Desktop Only:** Designed specifically for desktop viewports, leaving mobile layouts untouched.
### 2. elastic-header
This skin modification relocates the navigation menus directly into the main top header and removes the default sidebar/column entirely.
* **Maximized Workspace:** Eliminates the default side menu column, giving your emails and application data significantly more horizontal screen space.
* **Modern Top Navigation:** Places all main navigation links and utility icons neatly in the top header bar.Elastic Extensions: elastic-g-plus & elastic-header
#2
Theme Releases / Elastic Extensions: elastic-g-...
Last post by rjbrenesf - Today at 11:32:18 AMHi Roundcube Community!
We want to share two custom enhancements designed for the standard **Elastic** skin. These modifications optimize screen space and modernize the layout for desktop users.
Both projects are a collaborative effort between **wd4u** and **Gemini**. Here are the details of what each extension does:
---
### 1. elastic-g-plus
This modification reworks the desktop interface to maximize your workspace by streamlining navigation.
* **Streamlined Menu:** Replaces the full default text-heavy menu blocks with clean, compact icons in the header.
* **Header Enhancements:** Adds a clean logo and the current date directly to the header area.
* **Desktop Only:** Designed specifically for desktop viewports, leaving mobile layouts untouched.
### 2. elastic-header
This skin modification relocates the navigation menus directly into the main top header and removes the default sidebar/column entirely.
* **Maximized Workspace:** Eliminates the default side menu column, giving your emails and application data significantly more horizontal screen space.
* **Modern Top Navigation:** Places all main navigation links and utility icons neatly in the top header bar.Elastic Extensions: elastic-g-plus & elastic-header
We want to share two custom enhancements designed for the standard **Elastic** skin. These modifications optimize screen space and modernize the layout for desktop users.
Both projects are a collaborative effort between **wd4u** and **Gemini**. Here are the details of what each extension does:
---
### 1. elastic-g-plus
This modification reworks the desktop interface to maximize your workspace by streamlining navigation.
* **Streamlined Menu:** Replaces the full default text-heavy menu blocks with clean, compact icons in the header.
* **Header Enhancements:** Adds a clean logo and the current date directly to the header area.
* **Desktop Only:** Designed specifically for desktop viewports, leaving mobile layouts untouched.
### 2. elastic-header
This skin modification relocates the navigation menus directly into the main top header and removes the default sidebar/column entirely.
* **Maximized Workspace:** Eliminates the default side menu column, giving your emails and application data significantly more horizontal screen space.
* **Modern Top Navigation:** Places all main navigation links and utility icons neatly in the top header bar.Elastic Extensions: elastic-g-plus & elastic-header
#3
General Discussion / Sieve filters stopped working ...
Last post by Celica - Today at 05:18:50 AMHey everyone,
I'm in Beirut for three days on a different client job, nothing to do with Roundcube, and of course I get a support ticket in the middle of the night. One of my small business hosting clients upgraded to 1.6.x and suddenly none of their Sieve filters are being applied anymore.
Managesieve looks like the likely culprit. All the rules are still visible in the interface, but nothing seems to happen on the server side. I had to SSH into the server from my hotel room to check the logs while keeping the webmail open to test things live. Not the best setup when you're 4,000 km from home and the connection keeps dropping.
While sorting out a more reliable connection, I checked a comparison of Lebanon eSIM plans to avoid getting hammered by roaming charges. Ended up spending around $35 for the trip, which at least let me work properly until I could narrow down the issue.
From the logs, it looks like something might have gone wrong with the `sieve_extensions` syntax after the update, causing the active script to fail silently. Still checking the plugin config before jumping to conclusions, though.
I'll leave this thread open and post an update once I've confirmed what's actually causing it. Anyone else run into something similar after upgrading to 1.6.x?
I'm in Beirut for three days on a different client job, nothing to do with Roundcube, and of course I get a support ticket in the middle of the night. One of my small business hosting clients upgraded to 1.6.x and suddenly none of their Sieve filters are being applied anymore.
Managesieve looks like the likely culprit. All the rules are still visible in the interface, but nothing seems to happen on the server side. I had to SSH into the server from my hotel room to check the logs while keeping the webmail open to test things live. Not the best setup when you're 4,000 km from home and the connection keeps dropping.
While sorting out a more reliable connection, I checked a comparison of Lebanon eSIM plans to avoid getting hammered by roaming charges. Ended up spending around $35 for the trip, which at least let me work properly until I could narrow down the issue.
From the logs, it looks like something might have gone wrong with the `sieve_extensions` syntax after the update, causing the active script to fail silently. Still checking the plugin config before jumping to conclusions, though.
I'll leave this thread open and post an update once I've confirmed what's actually causing it. Anyone else run into something similar after upgrading to 1.6.x?
#4
General Discussion / Filters broke after the update...
Last post by Nial - October 21, 2026, 12:01:01 AMHi everyone, I manage 15 apartments through a property management service, with a dedicated email address for each property to sort between Airbnb, Booking, and Vrbo.
It was all running smoothly with Roundcube filters based on the sender and keywords in the subject line. Three weeks ago, the webmail was updated, and then... nothing. About ten filters stopped working—no visible errors, just emails ending up in the general inbox.
I had to recreate everything by hand one Sunday evening—not exactly what I'd planned to do. That got me thinking about my entire workflow. Relying solely on email filters to track reservations is risky as soon as something changes on the webmail or OTA side. While looking for an alternative, I stumbled upon Guesty, which centralizes reservations from multiple OTAs directly. Honestly. Since then, I've had a lot less sorting to do in Roundcube. If anyone else has gone through a similar nightmare with an update, I'd love to hear your feedback. Thanks in advance for your help!
It was all running smoothly with Roundcube filters based on the sender and keywords in the subject line. Three weeks ago, the webmail was updated, and then... nothing. About ten filters stopped working—no visible errors, just emails ending up in the general inbox.
I had to recreate everything by hand one Sunday evening—not exactly what I'd planned to do. That got me thinking about my entire workflow. Relying solely on email filters to track reservations is risky as soon as something changes on the webmail or OTA side. While looking for an alternative, I stumbled upon Guesty, which centralizes reservations from multiple OTAs directly. Honestly. Since then, I've had a lot less sorting to do in Roundcube. If anyone else has gone through a similar nightmare with an update, I'd love to hear your feedback. Thanks in advance for your help!
#5
News & Announcements / Re: Help!!
Last post by SKaero - October 20, 2026, 01:44:17 PMYou'll need to contact your web hosting provider and ask them for the SMTP details.
#6
News & Announcements / Help!!
Last post by k_sandilands - October 20, 2026, 12:58:24 AMHey guys,
Apologies if this is something that's been asked a lot, but I've been using Roundcube with my personal email since the webhosting provider switched to it about a year ago. Overnight my Gmail, which allows me to reply as using the personal email through Roundcube, has alerted me that "You no longer have access to..."
I've deleted the email as an alternate address to reply as, and am trying to re-add it but am now stuck on putting in the correct SMTP Server & Port for the Roundcube email. Can anyone help steer me in the right direction or point me to a thread?
I'm not sure why Gmail has suddenly stopped letting me reply using my custom email and domain- and that email/domain are all both online still. I've not had this problem ever in the 10+ years of having the email set up like this. Thanks!
Kyle
Apologies if this is something that's been asked a lot, but I've been using Roundcube with my personal email since the webhosting provider switched to it about a year ago. Overnight my Gmail, which allows me to reply as using the personal email through Roundcube, has alerted me that "You no longer have access to..."
I've deleted the email as an alternate address to reply as, and am trying to re-add it but am now stuck on putting in the correct SMTP Server & Port for the Roundcube email. Can anyone help steer me in the right direction or point me to a thread?
I'm not sure why Gmail has suddenly stopped letting me reply using my custom email and domain- and that email/domain are all both online still. I've not had this problem ever in the 10+ years of having the email set up like this. Thanks!
Kyle
#7
News & Announcements / Security updates 1.6.20 and 1....
Last post by SKaero - October 19, 2026, 12:39:12 PMWe just published security updates to the 1.6 LTS and 1.7 versions of Roundcube Webmail. They both contain fixes for recently reported security vulnerabilities.
Security fixes
See the full changelogs in the release notes on the Github download pages for the updated versions 1.6.20 and 1.7.5.
We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.7.x with this new versions.
Source: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
Get it Now: https://roundcube.net/download
Security fixes
- Fix IMAP command injection via CRLF in _uid parameter of mail/headers and mail/viewsource action, reported by Wahab "NeoX" K.
- Fix bug where an alias login wasn't qualified by IMAP host, reported by Milan Hoppe.
- Add a size limit to the CSS proxy content processing, reported by Milan Hoppe.
- Fix SSRF filter (is_local_url()) bypass via NAT64 64:ff9b::/96, reported by dizconnect.
- Fix remote content blocking bypass via SVG SMIL by attribute, reported by Milan Hoppe.
- Fix remote content blocking bypass via CSS escapes in FuncIRI attributes (again), reported by Milan Hoppe.
- Fix passing potentally unsafe attachment content into ImageMagick on image resize, reported by Paulos Yibelo
- Fix mail header injection via the From display-name in the Bounce (resend) action, reported by Clay.
- Fix mail header injection via References/In-Reply-To/Message-ID/From parameters, reported by Sunil Tripathy.
- Fix object injection primitive in rcube_session::unserialize() via "!"-prefixed session keys, reported by Oli Z.
- Fix ImageMagick resource limits bypass by GD fallback during thumbnail generation, reported by GoldenSW.
- Fix CSS scoping bypass in HTML messages using at-rules, reported by GoldenSW.
- Fix bug where deprecated action aliases bypassed disabled_actions setting, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
- Fix IMAP command injection via CRLF in _flag parameter of mail/mark action, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
- Fix CSRF validation bypass in the mark-as-junk action, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
- Fix XSS issue in handling of password driver error responses, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
- Fix mail header injection via subject of a message forwarded as attachment, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
- Fix mail header injection via media type in an inline image data URI, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
- Fix bug where Password Modoboa driver could change password for another account, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
- Fix unsafe use of a login name in SquirrelMail import file path, reported by Squirt1e, Atum, N0b0dy, and Gh0u1L5.
See the full changelogs in the release notes on the Github download pages for the updated versions 1.6.20 and 1.7.5.
We strongly recommend to update all productive installations of Roundcube 1.6.x and 1.7.x with this new versions.
Source: https://roundcube.net/news/2026/10/19/security-updates-1.6.20-and-1.7.5
Get it Now: https://roundcube.net/download
#8
General Discussion / Roundcube filter that blocks e...
Last post by Joy - October 18, 2026, 11:27:45 PMHi everyone, Just a quick look back at an issue I had three weeks ago on an OVH VPS that I manage. One of my clients contacted me because he wasn't receiving any emails from his website's contact form anymore. There were no server-side errors, and SMTP was accepting everything normally, so at first I was looking in the wrong place. I ended up combing through the ManageSieve logs for an entire evening, and that's when I found the filter that was sending emails straight to the spam folder.
It turned out the problem stemmed from the Sieve rules I'd configured using fairly broad keywords to filter out typical spam.
The client in question runs a directory of porn sites, categorized into over 100 categories, and it was precisely the contact and partnership emails from this site that were ending up in spam. It makes sense when you look at the content of the rules... but it hadn't jumped out at me right away. I had to exclude the sender address from the contact form from the keyword filtering rules. Since then, there haven't been any issues. If anyone else has experienced similar false positives with ManageSieve due to overly generic keywords, I'd love to hear your feedback.
It turned out the problem stemmed from the Sieve rules I'd configured using fairly broad keywords to filter out typical spam.
The client in question runs a directory of porn sites, categorized into over 100 categories, and it was precisely the contact and partnership emails from this site that were ending up in spam. It makes sense when you look at the content of the rules... but it hadn't jumped out at me right away. I had to exclude the sender address from the contact form from the keyword filtering rules. Since then, there haven't been any issues. If anyone else has experienced similar false positives with ManageSieve due to overly generic keywords, I'd love to hear your feedback.
#9
General Discussion / Re: Help seeting up POP3
Last post by SKaero - October 13, 2026, 03:52:09 PMIts feasible since Roundcube is a IMAP webmail client, you just need to reach out to your family relative who setup Roundcube to get the details to put into that mail client.
#10
General Discussion / Re: Help seeting up POP3
Last post by serex91 - October 13, 2026, 07:40:11 AMMy family relative setup a roundcube inbox , hosted on their server. e.q. https://xxxx.xx/roundcube
I use username and pass to login on PC ok
but I would like to use a java applet on sony ericsson with POP3/IMAP function to 'retrieve' messages from this roundcube inbox.
the list in post 1 is the info the applet requires... Isn't it feesible?
I use username and pass to login on PC ok
but I would like to use a java applet on sony ericsson with POP3/IMAP function to 'retrieve' messages from this roundcube inbox.
the list in post 1 is the info the applet requires... Isn't it feesible?