Horde: how to forward "http" to "https"

[JamesG]

Hi,

does sombody know, how to forward: "http://webmail.domain.com" to "https://webmail.domain.com"?

thx,
JamesG

 

[albans]

Try a rule this way in a .htaccess in the /usr/share/psa-horde directory:

RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule (.*) https://webmail.domain.com/$1 [R=301,L]

This should work...

 

[JamesG]

@albans: thanks but it does not really work...
The Rewrite module is loaded: Does it have to be configured?

 

[albans]

It doesn't need any configuration... Maybe the .htaccess isn't understood by the webserver. I've to try it on my host, and I'll let you know later.

 

[JamesG]

Originally posted by albans
It doesn't need any configuration... Maybe the .htaccess isn't understood by the webserver. I've to try it on my host, and I'll let you know later.

ok, thanks!

 

[albans]

Alright for the .htaccess, it's not working...

But the method below works perfectly and is cleaner:

1. Create a text file "webmail.conf" in /etc/httpd/conf.d
2. Put this in the file:

<Directory /usr/share/psa-horde>
RewriteEngine on
RewriteCond %{SERVER_PORT} !^443$
RewriteRule (.*) https://%{HTTP_HOST}/$1 [R=301,L]
</Directory>

3. Stop Apache: service httpd stop
4. Start Apache: service httpd start

This is working on my box. Hope it'll work too on yours!

 

[JamesG]

thanks but I get the 403 error...whe I try to access: http://webmail.domain.com and it was issued by Apache/mod_security:
tail modsec_audit.log
Apache-Error: [file "mod_rewrite.c"] [line 4463] [level 3] Options FollowSymLinks or SymLinksIfOwnerMatch is off which implies that RewriteRule directive is forbidden: /usr/share/psa-horde/
Apache-Handler: type-map
Stopwatch: 1174758002359843 6723 (596 2042 6207)
Producer: ModSecurity v2.1.0 (Apache 2.x)

Do you know how to solve the problem?

thx,
JamesG

 

[albans]

Try to add this in the webmail.conf:

Options +FollowSymLinks

Or even deactivate ModSec for webmail (it's not really usefull and some problems happens if you use the gotroot rules, even with the default exclude files) by adding:

SecFilterEngine Off
SecFilterScanPOST Off

And also another post about modsec & Horde:
http://forum.swsoft.com/showthread.php?s=&threadid=41519