@msbt this would really be a separate feature request forum post, if you don't mind 🙂

Updated first post with more data.

@Refugee_Ranger said in Enormous Security Hazard:

Cloudron will configure Cloudflare for DNS only

By default, Cloudron configures any new app for DNS only. You have to go to the Cloudflare dashboard to enable proxying. Once you enable it in Cloudflare, Cloudron will preserve the proxying flag.

There is a bug in the current release that the code crashes when trying to send a notification if a backup failed. This is fixed . I think in the coming releases we can explore more notification options but atleast now you should get an email.

@eddowding Ah, perfect. I actually sent you a note from support early today morning, but that was probably too late.

To follow up here, the next release 7.3 has built-in support for external links in the dashboard, so it will be unnecessary to install some trampoline app like surfer or lamp.

@jdaviescoates Cool, works perfect!

@nightmare thx i try that later

@nebulon So, I am looking for the web terminal and this file manager. I am sure I am missing something simple.....

Ahh I found them - they are in the app that is installed! Got it!

@nebulon This worked! I just replaced the old one, not sure how to add a second one. But I have an installation. Now to check it out... Thanks a lot!

@BrutalBirdie So I figured this out, and it's definitely NOT a Cloudron issue. Actually, it's a Thunderbird issue... so I'll probably go write a quick report on Bugzilla at some point.

It turns out that when you hook up two emails for Thunderbird that (1) go the same mail server and (2) share the same password, that causes Thunderbird to ignore the username.

What this means:

Let's say you set up two mailboxes in Cloudron, your.name@company.com and service@company.com. While your.name@company.com is accessible to you, service@company.com is instead accessible to a group you are a part of. You can use user account password to log into both.

Let's say you first add your.name@compay.com to Thunderbird. It will work fine. However when you add service@company.com, outgoing will be messed up (though incoming will work). Rather than outgoing being registered for service@company.com, it'll go out through your.name@company.com, which is not the correct behavior.

You can fix this by going into Outgoing Servers in Thunderbird, but it's a big pain it doesn't need to be, and I'm sure it's something that can be fixed on the Thunderbird end.

Anyways, that was a fun dive into some email issues... hopefully I can get this fixed and jump back into using groups, as that helps make security issues with emails a little easier to deal with (no having to reset everybody's shared password).

Hope you all have an awesome day!

@chris thanks for creating those!

@benborges Ah ok. Maybe you can wait for 7.3. Please update to that and try to update again and we can debug further. There are some cgroup v2 related fixes for Ubuntu 22 in 7.3 which affect docker container creation, it's possible you hit that case.

@girish said in Mail server - How to expose ports for internal network:

@ChicagoGregg said in Mail server - How to expose ports for internal network:

Is it possible to expose its ports (25,465,587) to the local network so that mail can be sent (relayed) through the mail server and let it handle it going outbound? Figuring that Cloudron has this capability, and I'd only have a few emails per day requiring this, it should be able to provide this.

If I understand correctly, you want to relay mail via another mail server. If so, just sent the relay using the External SMTP relay configuration.

I am not quite following the part about exposing port 25/476/587 though. These are already exposed on the server. You have to configure your router/firewall to port forward those ports to the Cloudron internal IP.

Sorry for the tardy reply here. Thanks for both of your replies @subven and @girish .

Originally, I was simply wanting to do something like

Home Network (App sends email) -> Cloudron (on home network) accepts mail for relay from local home network 10.x.x.x -> sends to server through Internet connection (to my already-configured mail relay server, External w/ authentication)

I was looking for an unauthenticated relay on the home network.

Well, I suppose that Cloudron can't provide an unauthenticated relay point. So, I suppose the workaround is simply to configure a user and relay using authentication using a domain that is configured.

I'm fine going this route... And I get why it's for that reason with security. 🙂

Thanks for the help!

-gregg

@Wishuwero do a systemctl restart box and refresh the browser. That should bring back the setup UI again.

@necrevistonnezr not sure about Roundcube as I moved over to SnappyMail, but I think it is similar.
Under Filters you can add a sieve script (maybe they call it 'custom')

And yes I think discard with message is equivalent. But not an expert.

Due to the excellent spamassassin rules posted here https://forum.cloudron.io/post/30512 by @d19dotca, I am not needing to use sieve in SnappyMail. But here is the script which I use in Protonmail. The from can be changed to to I guess.

NB : I put the reject part of the rule before the spam test. Arguably I should have a return after the reject - not sure why I did not do that.

require ["include", "environment", "variables", "relational", "comparator-i;ascii-numeric", "spamtest", "reject", "fileinto", "imap4flags"]; if address :contains "from" ["spammer@blah.co.uk", "spammer.com"] { reject "Spam"; } if spamtest :value "ge" :comparator "i;ascii-numeric" "5" { fileinto "spam"; } if exists "list-unsubscribe" { addflag "\\List"; } # Generated: Do not run this script on spam messages if allof (environment :matches "vnd.proton.spam-threshold" "*", spamtest :value "ge" :comparator "i;ascii-numeric" "${1}") { return; }

https://forum.cloudron.io/topic/7619/filesystem-mount-inside-container for others to follow along.

ZFS is not supported/untested. I would say please open a feature request in the feature request category if this is required and we have to analyze the benefits/use case.

Hi there, please send us a mail with your Cloudron ID and appstore account email to support@cloudron.io