Roundcube times out when forwarding email with links

ArashiInteractive

Verified User
Joined
May 25, 2021
Messages
27
Bit of a strange one today. A client reported that when forwarding emails to certain addresses, the send times out. In this case, they're sending from DA to a Gsuite email address, but others have also exhibited the same behavior. After some troubleshooting, I found that if the body content of the email has any links in it, the send will timeout/fail. If the links are removed, the send works as expected.

Is there a setting in config for Roundcube that can be adjusted to allow messages with links to be forwarded? Or may this be a config elsewhere?

Thanks in advance.
 
After a bit more experimentation, in Preferences > Composing Messages > Compose HTML messages - if this is set to never, the timeout issue is resolved. If this is left to HTML, then the timeout issue returns.

Will pose this as a solution to the client, but they may prefer the more attractive HTML email look. Any of this sound familiar?
 
After a bit more experimentation, in Preferences > Composing Messages > Compose HTML messages - if this is set to never, the timeout issue is resolved. If this is left to HTML, then the timeout issue returns.

Will pose this as a solution to the client, but they may prefer the more attractive HTML email look. Any of this sound familiar?
Maybe the link (s) was not as correct html in that body?
 
The few messages I've looked at and used for testing all have correct links. They're mostly in the senders signature file, but sometimes will link to various documents or resources online in the body.

If you connect via an email client - Outlook, Thunderbird, etc then there's no issue. If you send plain text email within Roundcube then no issue. Only seems to happen when sending HTML email within Roundcube; so guessing there's some sort of check that happens before the message is sent that's failing. I just haven't had much luck in Google'ing this one.
 
The few messages I've looked at and used for testing all have correct links. They're mostly in the senders signature file, but sometimes will link to various documents or resources online in the body.

If you connect via an email client - Outlook, Thunderbird, etc then there's no issue. If you send plain text email within Roundcube then no issue. Only seems to happen when sending HTML email within Roundcube; so guessing there's some sort of check that happens before the message is sent that's failing. I just haven't had much luck in Google'ing this one.
There are some settings in the htaccess roundcube or server configs for security i don't know but "security headers' parts source....
 
After some more digging, it looks as though Comodo WAF 2.24.5 has some XSS rules which were causing the problem. I haven't worked through the list of 50 rules to see which may be causing the problem yet. But early testing shows the client is able to reply/forward HTML emails with links.

Thanks for pointing me in the right direction.
 
Back
Top