Runbox, email privacy, and the recent news

In the last few days we have seen an increase in inquiries about privacy and security, and particularly whether Runbox could be involved in programs similar to those outlined in the recent allegations about interception of communications data by law enforcement agencies.

As a Norwegian company and service, Runbox is protected by Norwegian law and privacy regulations because all our email servers are located in a secure facility in Oslo, Norway. No entity, domestic or foreign, can access email or files stored in our data center without a Norwegian court order.

You can read more about US, European, and Norwegian privacy regulations here: Email Privacy and Offshore Email

Email encryption

To protect data being transferred to and from the Runbox servers in Norway, it’s important to use encryption such as SSL (Secure Sockets Layer) which is available both in the Runbox Webmail and in email clients.

When using Webmail, make sure that the SSL padlock icon is visible in the browser’s address bar and that the domain’s identity is verified as runbox.com.

In email clients such as Outlook and Thunderbird, set up your Runbox account with SSL according to the instructions found on our IMAP help page.

Runbox plans to extend our encryption support in the near future to allow complete encryption of messages all the way from sender to recipient.

 

Continue Reading →

Unlimited Aliases – Using Domain Catch All with Filters

Aliases

From time to time we get asked by members if we could allow unlimited aliases on domains as part of our standard plans that have email hosting included. We understand that if you own a domain you want to use it in a way that suits your needs.

You can of course purchase additional aliases for your account and use them with your domain.  However, this comes at additional cost, and there is another way that you can effectively create aliases for free.

Using Catch All

In Account > Email Hosting you will see a list of your domains (if you have any) and next to each one is the option to allow that domain to “catch all” email that is sent to it.  The benefit of selecting catch all for a domain is that all email sent to anything@nulldomainyouown.com will be delivered to your account.

Pros:

  • you don’t need to set up aliases you can just make up anything@nulldomainyouown.com and use it immediately
  • emails where people mistype the alias will still be delivered (as long as they spell the domain correctly of course)
  • effectively unlimited aliases

Cons:

  • it could increase the amount of spam you receive because all email is delivered and spammers may try to guess aliases

As you can see, the pros outweigh the cons, and there is even something you can do about the spam issue (see below).

Using Filters with Catch All

When using catch all, emails can still be filtered just as with any alias that is set up.  With the careful use of filters a lot of flexibility can be achieved.  If you look at the screen-shot below, you will see a number of filters are being used for different purposes. An explanation of each filter follows the screen-shot.

alias_filters


In the case of each filter the “Header” option is used because the use of “To” would not match emails where someone sends to your address/alias in the CC or BCC fields.

Filter 1:  Filters emails sent to alias1@nulldomainyouown.com and moves them to the Inbox.

Filter 2:  Filters emails sent to alias2@nulldomainyouown.com and moves them to a folder called Personal.

Filter 3:  Redirects emails sent to alias3@nulldomainyouown.com to any other email address you want, and does not leave a copy of the email in your Inbox.

Filter 4:  When you use your own domain with Runbox, by default we always allow email to postmaster@nulldomainyouown.com to get to your Inbox unless you decide to filter them. This is good email practice and this is common across email providers. You will require something like Filter 4 if you decide to implement Filter 5.

Filter 5:  This is where we can do some spam control. This filter deletes all email addressed to your domain that doesn’t match one of the filters that comes before it.  Filters are matched in order, so this one has to come last. If a spammer tries to guess at an address at your domain, this filter will prevent those emails reaching your Inbox.  However, it does not reject them, and people who might mistype your alias will also have their emails deleted with no rejection email to warn them that the email was not  delivered.

A Note about Filter Orders

As mentioned earlier, filters are used in the order they are listed. In the example above the ordering is deliberate even though the order of the first 4 does not matter too much in this case. Filter 5 has to come last otherwise it would delete all email to your domain before the others could filter it.

The order 1-4 that we have used in our example places the filters after our spam filters.  This might be desirable.  However, if you were using a filter to redirect email to another email address, you might want all email to that address including possible spam to be sent to the other address so that filtering can happen in the destination account.

To do this you need to place any filters before filter value -2 (minus 2) as this is where the Runbox spam filters are. You can see a list of filter order values in the Runbox discussion form under Order Values for Filter Processing.

Continue Reading →

Email Alias and Email Domain limits increased

After a lot of customer feedback we’ve decided to increase the number of email aliases and email hosting domains included in all Runbox subscription plans.

Both main and sub-account subscriptions as well as legacy subscriptions and the 3-year Medium plan will be upgraded.

The following upgrades will take effect June 1, 2013 for all existing and future Runbox accounts:

Email Aliases

Plan Micro Mini Medium Max
Previously 5 10 20 50
Now 10 20 50 100

Email Hosting Domains

Plan Micro Mini Medium Max
Previously 0 1 2 5
Now 0 5 10 25

You can find a complete overview of our price plans here: http://www.runbox.com/price-plans/

We will continue evaluating our plans and appreciate your feedback!

What about my existing alias/domain add-on products?

If you have any existing email alias or email domain upgrades they will be added to the new quotas. For instance, if you have a Runbox Medium subscription with a package of 5 extra aliases, you now have 55 email alias slots available.

We have deactivated any automatically recurring alias/domain add-ons in case they aren’t needed with the new quotas. You will be alerted to renew them manually when they expire, at which point you can decide whether or not to keep them.

What are aliases anyway, and how do I use them?

An email alias is simply an alternative email address pointing to your Runbox account. By using several addresses you can better organize your email because it lets you manage several “identities” from within the same account.

You can read more about aliases in our recent blog post How To Use Email Like a Pro 3: Use Several Addresses or go straight to Account > Aliases in your Runbox account to set them up.

What are email hosting domains?

An email hosting domain lets your Runbox account receive email sent to addresses @domainyouown.com. Note that this is not the same as an actual domain name, which needs to be registered in the global Domain Name System (DNS) first.

In order to manage your domain’s email in your Runbox account you first need to register your domain in Account > Domain Hosting (or another domain registrar) and set the domain’s MX (Mail eXchanger) record to point to mx.runbox.com. Then you can add your domain in Account > Email Hosting to tell the Runbox system that your account shall receive email sent to your domain.

Finally you can set up email aliases or even other accounts on your domain, using Account > Aliases and Account > Sub-Accounts.

Find out more about Email Hosting and Domain Hosting.

Using Catch All for unlimited aliases on your own domain.

If you own your own domain, it is possible to use the “catch all” function in Runbox Mail Manager as a way to have unlimited email aliases on that domain. You can even use filters to forward emails to other accounts within Runbox, or to other email providers.

To activate this feature go to Account > Email Hosting and select the catch all check box next to the domains you want activate catch all for, and then click “Save Settings”.

All emails addressed to anything@nulldomainyouown.com will then be delivered to your account.

We have another blog post about using catch all alongside filters to provide aliases for various uses, and how to control spam that using the catch all function might attract.

Continue Reading →

New POP server being added

We’re planning to deploy an extra POP server Monday May 27 at 6-7 AM CET to improve performance for POP email clients.

This deployment should not affect services negatively, but please let us know if you do experience any irregularities using POP during or after the specified time.

Continue Reading →

Countering the recent spam surge

Over the past 8-10 days we have seen a significant surge in incoming spam, especially about weight loss.

We are working to reject more of this type of spam centrally, and hope to have achieved this as of today.

But if your account is still severely affected, there are things you can do to improve the situation meanwhile:

Most of our customers report that their spam filter does catch the spam, but that going through the Spam folder looking for legitimate messages becomes too big a task due to the large number of spam messages.

If this is affecting you, please see the following article on how to set up an extra filter to separate the very obvious spam from the messages the spam filter is less certain about and that you should review manually: https://help.runbox.com/avoid-sorting-through-spam-for-legitimate-email/

If your spam filter doesn’t catch this type of spam, please make sure that your Trainable Spam Filter is enabled in Manager:Filter, and that you train any missed spam mails using the Report Spam button.

Continue Reading →

New POP server name for Apple Mail

Many Apple Mail users have been having problems connecting to Runbox via POP recently due to Apple changing the supported authentication methods in Mail.

Apple Mail POP users can now use the server name apop.runbox.com to connect to Runbox.

If you use Apple Mail with POP (not IMAP), please do this:

  1. Open File => Preferences to open the Accounts dialog.
  2. Select your Runbox account in the left pane.
  3. In “Incoming Mail Server”, enter: apop.runbox.com
  4. Click the Advanced button.
  5. Under “Authentication”, select: Authenticated POP (APOP)
  6. Click the red button in the top left corner to close Accounts.
  7. Click Save.

Your Runbox account should now be able to receive email. If not, please try restarting Apple Mail.

Continue Reading →

Server upgrade underway [Completed]

As previously announced we’re now taking down one of the application servers in order to upgrade it.

Most likely only some users will be affected while others can keep using the email service normally while the upgrade takes place.

We will keep you updated here as the work progresses.

UPDATE 08:22 CET: We have installed the Flash Cache and are rebooting the server.

UPDATE 08:32 CET: We’re reconfiguring the server to work with the new Flash Cache.

UPDATE 09:00 CET: We’ve encountered some complications and will try a couple more things before reverting.

UPDATE 09:41 CET: We have problems with the upgraded kernel/network card combo and are trying to solve this now. We apologize for going outside the scheduled downtime window.

UPDATE 10:24 CET: We’re now installing a new network card to resolve incompatibilities.

UPDATE 11:01 CET: We’re still working hard to resolve remaining conflicts. Meanwhile, you can use the new Runbox 6 Webmail at https://rmm6.runbox.com, but note that some users won’t be able to open messages until we finish the upgrade.

UPDATE 11:17 CET: We are back up and fully operational again. Our apologies for any inconvenience caused by the prolonged downtime. 

UPDATE 13:50 CET: It seems we forgot to remove the redirect on runbox.no. This is fixed now! www.runbox.no

Continue Reading →

Server upgrade and scheduled downtime

In order to improve the performance of our email services we will perform a server upgrade with the scheduled downtime window:

*** Wednesday, February 6 at 8:00 AM to 9:00 AM CET ***

(7:00-8:00 GMT / 2:00-3:00 AM EST / 11:00-12:00 AM Feb 5 PST)

This means that the Runbox email services to be unavailable for up to 1 hour while the upgrade take place.

The downtime should be outside business hours for most of our customers, but we know you depend on your Runbox email and we will work as efficiently as possible. It shouldn’t take longer than 20 minutes, but the downtime window is set to 1 hour to be safe.

Incoming email will be queued on our servers and will be delivered once our system is fully operational again.

What you can do

If you usually check your email during this time, please log on either well before or after that interval on Wednesday.

To keep updated you can check our Blog at http://blog.runbox.com and Twitter at
https://twitter.com/Runbox.

What we are doing

We are installing a Flash Cache on one of our application servers to improve the performance of disk access when email clients open email on the server.

This is done as a measure to increase the I/O (input/output) capacity of the server until we acquire new and more powerful servers.

We apologize if the upgrade causes any inconvenience for you and appreciate your understanding!

Thank you,

The Runbox Team

Continue Reading →

Increased password strength

To protect your Runbox account, and any other online account you may have, it’s crucial to choose a good password. Your password needs to be unique enough to prevent others from guessing it or computers from cracking it.

This is becoming increasingly important since attackers can use powerful password cracking software and attacks are happening more often.

We see that many users choose passwords that are too simple, perhaps thinking that no one will try to gain access to their account, or that they don’t have anything to hide anyway.

The importance of strong passwords

However, if someone did gain access to your account unauthorized they could potentially use the contents to break into other accounts you may have, since email often contains login information to other services.

An intruder could also hijack an account in order to send large amounts of spam, which would  hurt not only the recipients of the messages, but also the account owner (due to returned, undeliverable messages). Furthermore, it could negatively impact Runbox as a whole, since it could get our service blocked by other email services.

Creating a good password

In Runbox 6, you can create a longer and more complex password using many different special characters.

Your password must be between 6 and 64 characters long, and can contain the letters a-z and A-Z, the numbers 0-9, and the following special characters:

+?=()&,.:;-_/*@!#~`#$%^&[]{}|\'”<>

We know, creating and remembering a long and complex password sounds like a big hassle. But it’s actually very simple, and could even be fun!

Just see our Tips for choosing and protecting passwords for a quick how-to.

Continue Reading →

Runbox 6 launched

Over the past year and a half we have spent a great deal of time behind the scenes upgrading the Runbox Webmail code. We have also upgraded all the underlying software that powers Runbox, and much of the hardware it runs on.

The Runbox 6 platform

This is the 6th generation of Runbox, and while it may appear similar to Runbox 5 it provides a solid and updated platform for further development of new features. In addition, we have created a software building and deployment system that will enable us to develop new code faster and more securely.

We have already put some new features into Runbox 6 — some minor ones you will discover as you use it, and a few bigger ones:

New Features in Runbox 6

1. Tags: These let you label messages across folders, and will allow you to organize and find messages more easily. To add a tag, open an email, select [New Tag] from the Tags field near the top, enter a tag name, and click “Add tag”. You can now sort messages by your tags in the message list.

2. Improved Account overview: You can now get a full overview of your account’s Data Usage on the Account screen.

3. Sub-account management: You will now be able to manage any sub-accounts you might have in a similar way to the main account and also see detailed information about the usage of the account. Just click the sub-account address in the list after going to Sub-accounts. Note: Sub-account owners can now change the passwords of their sub-accounts and therefore potentially access them.

4. Color themes: You can now choose between 4 color themes by going to Webmail: Preferences and selecting an option from the “Theme” menu. We have also removed they gray background color from all pages to brighten things up a bit.

Try Runbox 6 now

You can start using Runbox 6 now by going to the following link: https://beta.runbox.com/mail?activate_rmm6=YES

This will take you to https://runbox.com, which is also where you will be redirected automatically next time you log in.

We hope you will enjoy the new Runbox! If you have any questions, please add a comment below or open a support ticket at https://support.runbox.com.

Continue Reading →