Webmail Subdomain Question

marcelorp

• April 28, 2015 10:25

Hello! I want to give to my customers an direct access to webmail, such as Roundcube or Horde, without going to CPanel login page, just to to Horde login page, for example, is that possible to do? I read in some website that enable the Proxy Domains is a security issue, but is there a way to use the WHM Subdomains, like: webmail, whm and others created in whm without activating the Proxy Domains? [Removed - Please attach directly to thread]

• 

  cPanelMichael

  • April 29, 2015 13:36

  Hello, Proxy subdomains should work by default. You could provide your email users the following URL:
  http://webmail.domain.com
  Or, simply add /webmail to the end of a domain name and the webmail interface will load. Thank you.

  0
• 

  marcelorp

  • April 29, 2015 13:47

  But with proxy subdomain desactivated, is possible to provide webmail.domain.com or just with proxy? Is there a way to made webmail subdomain work without proxy? Or the proxy is not a security issue and I can enable that without problem?

  0
• 

  cPanelMichael

  • April 29, 2015 17:28

  Hello, The security option I believe you are referring to is: "Cookie IP validation" Per it's description: Validate the IP addresses used in all cookie-based logins. This will limit the ability of attackers who capture cPanel session cookies to use them in an exploit of the cPanel or WebHost Manager interfaces. For this setting to have maximum effectiveness, proxydomains should also be disabled. Strict validation requires the current IP address and the cookie IP address to exactly match. Loose validation only requires they are in the same /24. It's common to see proxy subdomains enabled. I suggest enabling proxy subdomains rather than attempting to manually configure Apache to allow for it. Thank you.

  0
• 

  joako

  • June 27, 2015 19:25

  But with proxy subdomain desactivated, is possible to provide webmail.domain.com or just with proxy? Is there a way to made webmail subdomain work without proxy? Or the proxy is not a security issue and I can enable that without problem?

  
  Proxy subdomains is a security issue and should be kept disabled until Cpanel is able to fix the security bugs.

  0

Please sign in to leave a comment.