Screen shots

Junk Email Filter

Security Notice
Phishing campain
Version 1.4.15
Security Upgrade

Config for httpS://mail.yourdomain.net using Apache 2.* with Fedora Core 3 and SquirrelMail 1.4.4 or SquirrelMail 1.5.*


(I couldn't properly add code here in the wiki)

Below added by Mike

If you don't care that that every web page on your server is forced to https, you can

copy and paste the following into your httpd.conf file (works on Apache 2.* with FC4):

RewriteEngine On
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

Remove the question mark that shows up in this display. Everything else is fine.

This is really helpful for those sites that plan to only have SquirrelMail running

on that server.

Hope this helps, -Mike

In case you have multiple vhosts on your system and want to use it in your vhost config (assuming you have both port 80 and 443 defined), simply put this in the VirtualHost? for port 80:

<IfModule mod_ssl.c>
	RewriteEngine On
	RewriteRule ^/(.*) https://%{SERVER_NAME}/$1 [L,R]

This way, it will also only activate the rewrite if ssl is loaded ;)



This is Fedora Core 4 specific, but here's what I did.

  1. Get rid of /etc/httpd/conf.d/squirrelmail.conf - it wants to have SquirrelMail run under the non-SSL-side of Apache.
  2. Edit ssl.conf to create a DocumentRoot path. I've used /var/www/secure. Create that directory first.
  3. Create a symbolic link in the new secure content directory to point to SquirrelMail. Run: ln -s /usr/share/squirrelmail /var/www/secure/mail.

Good luck.

/ gregweb(aht)hawley(doht)homeip(doht)net

For IIS if you have SSL set up and your certificate installed you can force SquirrelMail to use SSL by:

1. In IIS Manager select the SquirrelMail directory and edit it's properties.

2. On the Directory Security Tab click the Secure communications Edit button.

3. Check the "Require Secure Communications" box.

© 1999-2016 by The SquirrelMail Project Team