HELP: Web based email package and Apache/SSL

wintermute

Can anybody recommend a good free web based email retrieval application that will easily hook in with with RedHat Linux 6.2 and the latest version of Apache/SSL.

I have promised a client that I’ll implement a secure remote email retrieval system for them on the cheap. Currently they have a Linux box running sendmail acting as their MX.

I havn't wrestled with Linux in a while so any other tips would be appreciated.

dogs

Not sure why this is on the Security board but...

I guessed you were looking for some web-based mail client ? If so you might want to take a look at Twig (http://twig.screwdriver.net/).
It's written in PHP, nice and modular and the code is clean enough to hack without much effort. It's also more than happy to live under ssl docroot.

HTH.

dahamsta

More of a mod_ssl man meself, but I don't think it really makes a difference. The SSL layer never really comes into it, as that's between the server and the client. The apps can still interact with the mail server as normal. Anyway, here's a lump of links:

http://php.resourceindex.com/Complete_Scripts/E_Mail_Utilities/Web_Based_E_Mail/

http://cgi.resourceindex.com/Programs_and_Scripts/Perl/Web_Based_E_Mail/

http://cgi.resourceindex.com/Programs_and_Scripts/C_and_C++/Web_Based_E_Mail/

The best I've found are:

http://netwinsite.com/

There are a few products here, but CWmail is a good, albeit quite expensive enterprise level product. Ignore the standard interface, it's ugly as hell but it is customisable (templates). Closed source though, so don't bother if you feel the need to hack.

http://www.gossamer-threads.com/scripts/webmail/

I've never used this Gossamer Threads product on any of my own machines, but I've tried the demo and it's pretty good. Customisable, but it's cool as it is, although the standard interface will require a modern browser. Change the templates and you can use it on your WAP phone, if you're stupid enough to want to. Written in Perl, and these boys are excellent coders. Support is second-to-none - I learned Perl on their forums. Quite pricey, but knowing Alex and the rest at Gossamer Threads, it would be money well spent.

http://www.endymion.com/products/mailman/

Again, a very good enterprise level solution, again in Perl, again a bit pricey. I think they also have a webmail application written in Java, but I've never used it. The only annoying thing about this fella is that they obfusacted the Perl code, so unless you've got a "de-obfuscator" or serious patience, forget about hacking it. Template based though, so you mightn't need to.

http://www.horde.org/imp/

This is the old favourite of a lot of sysadmins out there, and I have to agree that it's a pretty good app. However, it uses phplib, which is pretty outdated IMHO, and it can be a complete pain in the **** to install.

http://twig.screwdriver.net/

My personal favourite. TWIG is a fantastic plain jane webmail app that does the job admirably without any of the bells or whistles. No javascript, no frames, no nothing, just good honest PHP code. I use this every day.

HTH,
adam

dahamsta

Well, they did mention SSL I guess.

wintermute

Thanks everyone for replying.

As for posting to the security board, well technically I asked for help on a part of a Layer 4 VPN. But also, I'm bias towards security people since it's what I do for a living. If somebody recommended a dodgy product in one post then there would a better chance that that would be pointed out by another poster on this board rather than some general one.

[This message has been edited by wintermute (edited 09-05-2001).]

spod

<font face="Verdana, Arial" size="2">Originally posted by wintermute:
Thanks everyone for replying.
[snip]

If somebody recommended a dodgy product in one post then there would a better chance that that would be pointed out by another poster on this board rather than some general one.

[This message has been edited by wintermute (edited 09-05-2001).]</font>

was just about to point out that imp used to at least need imap which is probably an unneccessary risk for secure webmail