Best practices with RoundCube

Maintenance
1

I read today about a RoundCube vulnerability and see a list of patches this year for vulnerabilities in RoundCube. This is making me nervous about keeping it running.

For a barely used MIAB RoundCube, do we have any best practices?

Ex. a recommended way to shut down the https ports until needed?

2

simplest way would be to block them at your firewall.

Try and and let us know.

Cheers

3

Hi! Repeat fix again? Change num&hash twice 8) and re-run setup.
Now MiaB with “Roundcube Webmail 1.6.17”

“https:__github.com/mail-in-a-box/mailinabox/pull/2586”

4

I’ve just tried:

sudo ufw status
sudo ufw deny http
sudo ufw deny https
sudo ufw status

When I eventually do want to visit the ux again, I will try:

sudo ufw status
sudo ufw allow http
sudo ufw allow https
sudo ufw status

I guess that’s sufficient and hopefully it doesn’t cripple miab. If I do notice problems, I’ll try to update here.

1 Like