Recovering a password uses getSiteUrl which also delivers a portnumber.
Within a proxy-environment, WebGUI is running on a non-standard port.
In the recovery-message, this port is added to the sitename, which will not work if the mod_perl-port is blocked by a firewall.
My solution (to change it quickly) in emailRecoveryFinish was:
...
my $url = $session->url->getSiteURL;$url=~s/:([0-9]*)//;