Updated to 3.0.1.6: Squirrelmail 403 Forbidden Access

[astewart]

Hi guys,
I am no longer able to access webmail (squirrelmail) from any of my domains:
eg. http://www.example.com/webmail

I get the custom ispconfig 403 Forbidden Page.
This just started to happen right after I updated from ISPCONFIG 3.0.1.4 to 3.0.1.6.

I have verified that the webmail Symlink still exists in /var/www/ and the apache file for squirrelmail has not changed either.

Permissions / User issue? :confused: :confused:

Does anyone have any ideas why this is happening now and what I might be able to try to get webmail working again?

Thanks!

[till]

http://bugtracker.ispconfig.org/index.php?do=details&task_id=937

Not sure when you updated as this has fixed in ISPConfig some days ago in the version used by the ispconfig_update.sh script.

[astewart]

I updated last night by simply running 'ispconfig_update.sh' from the command line.
I updated from version 3.0.1.4 to 3.0.1.6.

It shows I'm running the latest version as well.



Should I try a manual update this time?

[till]

No, not nescessary. Where exactly are the source files of squirrelmail located in your installation?

[astewart]

No, not nescessary. Where exactly are the source files of squirrelmail located in your installation?

The squirrelmail source files are all located in:
/usr/share/webmail

[astewart]

Just to add, I have tried renaming the .htaccess just to see if that was causing the problem on one of my sites but no difference.

The following symlink is also created in /var/www/
webmail -> /usr/share/webmail/

Here is the squirrelmail vhost info:
Alias /webmail /usr/share/webmail

<Directory /usr/share/webmail>
Options Indexes FollowSymLinks
<IfModule mod_php4.c>
php_flag register_globals off
</IfModule>
<IfModule mod_php5.c>
php_flag register_globals off
</IfModule>
<IfModule mod_dir.c>
DirectoryIndex index.php
</IfModule>

# access to configtest is limited by default to prevent information leak
<Files configtest.php>
order deny,allow
deny from all
allow from 127.0.0.1
</Files>
</Directory>

I have no idea why this update would break this.
Any ideas?

[astewart]

Here is a snip from the error.log file from one of my Domains:
[Fri Oct 23 14:32:03 2009] [error] [client 192.168.2.5] client denied by server configuration: /usr/share/webmail/
[Fri Oct 23 15:52:51 2009] [error] [client 192.168.2.*] client denied by server configuration: /usr/share/webmail/
[Fri Oct 23 15:52:52 2009] [error] [client 192.168.2.*] client denied by server configuration: /usr/share/webmail/
[Fri Oct 23 15:52:53 2009] [error] [client 192.168.2.*] client denied by server configuration: /usr/share/webmail/

[astewart]

I fixed the issue!
Previously, I've always had my custom squirrelmail source code in '/usr/share/webmail' and it has always worked like this.

I verified the 'ispconfig.conf' and it shows the following:
<Directory /usr/share/squirrelmail>
Order allow,deny
Allow from all
</Directory>

I know ISPCONFIG would over-write my changes if I modified that, so I just made a copy of the webmail directory and called it squirrelmail, reloaded apache and now everything works.

:)