Nginx proxy not able to display squirrelmail

Anoop P Alias

Well-Known Member
Mar 31, 2015
103
16
18
Kochi,Kerala,India
cPanel Access Level
Root Administrator
Running Nginx as a reverse proxy, webmail like Horde and Squirrelmail fail to display

Because of the webmail.php use header as below

i.imgur.com/SyVyI8t.png


i.imgur.com/p8lbeZr.png

This popped up in a recent upgrade I believe

Ref: github.com/engintron/engintron/issues/864
Webmail not working · Issue #864 · engintron/engintron
 
Last edited by a moderator:

cPanelLauren

Product Owner II
Staff member
Nov 14, 2017
13,266
1,301
363
Houston
Hi @Anoop P Alias

nginx and engintron are 3rd party software and not something supported by cPanel at this time. If there's an issue with this we can recommend that you switch back to Apache to determine if the issue is still present but issues with displaying pages over nginx need to be addressed with the maker of the plugin.

Looking at the link to the report you provided from engintron's GitHub it does appear that switching back to apache resolves the issue in this instance. Furthermore I want to point out that SquirrelMail is going away The Death of SquirrelMail | cPanel Blog and it will be removed from the product in a future release.

You might take a look at WHM>>Server Configuration>>Tweak Settings ->
Use X-Frame-Options and X-Content-Type-Options headers with cpsrvd
Use the X-Frame-Options HTTP response header to indicate whether a browser can render a page in a <frame>, <iframe> or <object> tag. This allows websites to ensure that their contents are not embedded into other sites, to avoid clickjacking attacks.
The server uses the X-Content-Type-Options response HTTP header to indicate that the MIME types in the Content-Type headers should not be changed or followed.
When you enable this option, the system adds the X-Frame-Options header, with a value of SAMEORIGIN, and the X-Content-Type-Options header, with a value of nosniff, to cpsrvd responses.
And toggle the setting - I'm not sure this would resolve the issue but may be worth looking at.

Thanks!