Jan 2022: Is rainloop still maintained?

[yeupou]

• Considering there are numerous reports of security issues that have been unanswered (issues Security Vulnerability "/_data_/…/storage/cfg/…/…/accounts" #2134 Security Contact for high severity Security Issue #2142 Vulnerability in https://mail.rainloop.net/ #2128 Trying to get in touch regarding a security issue #2117 - that's only for the recent pages of issues, I did not go through the backlog) ;

• That most recent issues that are closed seems to have been closed by their poster, or with help of other users ;

• That some bugs might be linked to downtime of rainloop official server (issues call to http://api.rainloop.net/status/FQDN on login page #2160 AppData call takes longer than 5 seconds #2161) ;

• That the dev team/support account is unresponsive
  ;

• That the code last change (in the repository) is 9 month old ;

everything points to Rainloop being no longer maintained at all.

#1831. This project is uncertain support status for years.

[ner00]

There's now a new fork of Rainloop that is called SnappyMail which is being actively maintained.

[oywino]

Regretfully, no Docker Image exists for SnappyMail.

[danir-de]

Regretfully, no Docker Image exists for SnappyMail.

Install it yourself, there should be enough LAMP images, if you need docker for it.

[yeupou]

It is a drag and drop replacement for rainloop.

For my use on Devuan servers, I made a primitive package ( http://apt.rien.pl/rien-webmail-snappymail_4.102-20220129_all.deb ) until it gets properly packaged in into Debian/Devuan.

[derStephan]

It is a drag and drop replacement for rainloop.

Does it keep all settings?

[danir-de]

It is a drag and drop replacement for rainloop.

Does it keep all settings?

Mostly, you'll have to adjust some settings and reapply some plugins though.

Make a backup beforehand and upgrade, but don't forget to communicate potential downtime.

[oywino]

It is a drag and drop replacement for rainloop.

For my use on Devuan servers, I made a primitive package ( http://apt.rien.pl/rien-webmail-snappymail_4.102-20220129_all.deb )
This seems to be a 404.

[yeupou]

There is now an official debian/devuan repository:

Check the-djmaze#185

deb https://snappymail.eu/repository/deb ./

gpg --keyserver keyserver.ubuntu.com --recv-keys   48208BA13290F3EB
gpg -a --export 48208BA13290F3EB | apt-key add -

[derStephan]

Mostly, you'll have to adjust some settings and reapply some plugins though.

Make a backup beforehand and upgrade, but don't forget to communicate potential downtime.

Worked perfectly. Just needed to remove the admin password and use the randomly generated for first login to admin page.

[Neustradamus]

Please use SnappyMail from @the-djmaze, we can thanks for this work!

• https://snappymail.eu/
• https://github.com/the-djmaze/snappymail/

Please note that SnappyMail supports SCRAM-SHA-* for connection, very good security:

• SCRAM-SHA-1-PLUS + SCRAM-SHA-256-PLUS + SCRAM-SHA-512(-PLUS) + SCRAM-SHA3-512(-PLUS) supports the-djmaze/snappymail#182
• https://github.com/the-djmaze/snappymail/blob/master/snappymail/v/0.0.0/app/libraries/RainLoop/Model/Account.php

Linked to:

• RainLoop is dead, if possible switch to SnappyMail: https://github.com/the-djmaze/snappymail #2185
• Sec: Fix CVE-2022-29360 XSS vulnerability #2183
• Please fix the exploit, thanks! CVE-2022-29360 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29360 https://www.ddosi.org/cve-2022-29360/ https://www.youtube.com/watch?v=6dSiQH0pijk #2180
• Jan 2022: Is rainloop still maintained? #2162
• Security Contact for high severity Security Issue #2142
• Security Vulnerability "/_data_/…/storage/cfg/…/…/accounts" #2134
• Is this project dead? #1831