SVN 280 - "TFTP " in a subject creates error.

[jrmy]

Not sure what is going on but if I include "TFTP " in the subject of an email, it looks like Roundcube attempts to access the root of the server. I receive a 403 Forbidden error.

Forbidden
You don't have permission to access / on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

I will also add that there must be a space after TFTP or it will not produce the error.

[bogg]

Works just fine here, must be something with your setup (?)

[jrmy]

Must be.


Could you try and rename your .htaccess file in the root of the roundcube directory and then try?

[bogg]

Must be.


Could you try and rename your .htaccess file in the root of the roundcube directory and then try?

Tried and also worked fine for me.

[jrmy]

Hmmmmm

It must be an apache or php setting somewhere. But I am more confused as to why it would do it at all. I can't see why there would be anything special about "TFTP ".

Oh yeah, and you are adding the space after TFTP correct?

[bogg]

Yes, made sure to add it afterwards.

tried these variants:

"TFTP "
"TFTP hejsan"
"hejsan TFTP "

All seemed to work.

[jrmy]

Well this is sure strange. I am going to assume it has to do with something my host has running. Maybe they have mod_secure enabled and that is causing it.

[Jester]

Yea, its possible that mod_security has some strict rules on.
When mod_security detects something it doesnt like, it will usually send a forbidden or service unavliable.