-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hallo,
MDaemon 6.8.0 publish hari ini ftp://ftp.dutaint.co.id/mdaemon/md680_en.exe ftp://ftp.dutaint.com/mdaemon/md680_en.exe Release Note - ------------ - ---------------------------- MDaemon 6.80 - June 10, 2003 - ---------------------------- SPECIAL CONSIDERATIONS - ---------------------- o Please check "Composite log window contains..." in Misc Options|GUI tab if you use the composite log window. Some settings have changed values and so you need to reset what you want the composite log to show. o By default MDaemon will accept MAIL data that does not contain an '@' followed by a domain name. If you would like MDaemon to refuse this instead set the following key in the MDaemon.ini file: [Special] RefuseWhenDomainMissing=Yes (default is No) o MDaemon supports multiple toolbars now. The installer will reset the toolbars to default settings. This results in four toolbars on four separate lines and looks ugly. I wasn't able to get these toolbars to align horizontally on one line. Just place the toolbars where you want them and their locations should be remembered. There is a known issue where you could get one really big toolbar and several smaller ones. This will happen once for Ghost session users. To solve it and get the correct set of default toolbars just hit the 'Reset toolbar' option from the Windows menu within MDaemon. o The MDaemon HELP file has been relocated to the \DOCS\ directory. The old copy was removed from the \App\ directory by the installer. o Check your \MDaemon\Backup directory. You might want to clean it out. Users who have been upgrading for a long time will have a very large backup directory just wasting disk space. o Due to a change in the Spam Blocker MDaemon will no longer (by default) process as many 'Received' headers when performing RBL lookups. See below for more information. o MDaemon's automatic LDAP address book publishing service will now also publish aliases to the LDAP address book. If you are using LDaemon, the installer will trigger an automatic update to your LDAP address book in order to populate it with alias information the next time MDaemon is started. MAJOR NEW FEATURES - ------------------ * MAJOR SECURITY UPGRADE - SSL/STARTTLS SUPPORT (MDaemon PRO only) * Security has been greatly enhanced through the integration of SSL technology directly into the mail server! MDaemon's SMTP, POP, and IMAP engines now support SSL encryption which makes MDaemon the most secure mail server on the market today. You can configure dedicated ports for SSL connections via new settings on the Setup|Primary Domain|Ports dialog box. However, dedicated ports are not needed. MDaemon will secure the standard SMTP, POP, and IMAP ports using the industry standard STARTTLS command for SMTP and IMAP and the STLS command for POP. A new 'Security' top-level menu contains the "SSL & Certificates" option which loads the configuration GUI for the SSL functionality. * SPAM FILTERING USING OPENSOURCE HEURISTIC TECHNOLOGY (MDaemon PRO only) * Spam filtering using a popular OpenSource heuristic technology has been integrated into MDaemon. The homepage for the OpenSource project can be found here: http://www.SpamAssassin.org. The heuristic mail filter examines email messages using numerous rules in order to compute a 'score'. This score is then used to determine the likelihood of a message being spam. By examining many thousands of known spam messages the rules have been optimized over time and are very reliable in detecting the fingerprint of a spam message. A new 'Security' top-level menu contains the "Spam filtering" option which loads the configuration GUI for the heuristic functionality. Also, a SPAM tab has been added to the main GUI which reports all the spam filtering activity. A new log file will track spam filtering activity. You can elect not to use this new log via a new setting in the logging options dialog. Also, the Misc. Options dialog has a new option to add Spam logging to the Composite log. Two new macros have been added to the Content Filter to allow you to make rules which capitalize on the scores the heuristic engine will add to messages. $SPAMSCORE$ will return the score that a message received and $SPAMREQD$ will return the value required in order for a message to be considered spam. * BAYESIAN ENGINE FOR SPAM / NON-SPAM DETECTION * Bayesian support within the new Spam Filtering system has been completed. Bayesian classification is a mathematical process whereby machines can actually learn. Through repeated exposure to known samples of spam (and non-spam) Bayesian enabled software can learn to recognize patterns. Over time, Bayesian classification techniques grow more and more reliable. A learning tool, SA-Learn, will be executed by MDaemon at midnight each night. The tool will examine the content of a "known-spam" folder and a "known-non-spam" folder. You provide the folders and the content. Once enough sample messages have been processed (200 of each type) the Spam Filter's heuristic engine will begin to assign scores based on the Bayesian results. Since the Bayesian results improve over time the scoring tends to get more and more accurate. Critical: The learning program depends on you - an intelligent human being (no jokes please), to act as an oracle. SA-Learn trusts that the messages you feed it really and truly are spam and/or non-spam. It takes your word that the input data is accurate. Here's what you should do: Go to the Spam Filtering|Bayesian tab and use the "Pub Folder" buttons to create two public folders - one for false negatives (messages that should have been flagged as spam but weren't) and another folder for false positives (messages that were incorrectly flagged as spam). Make these folders accessible to all your IMAP users (this will happen by default). Now, instruct your users to place copies of any false positive or false negative messages that they receive into these public folders. MDaemon will process them through the learning tool at midnight each night. After processing, these messages are automatically deleted. That's all there is to it. Now you have a spam fighting system that can actually learn. In no time it will greatly customize Spam Filtering operations for your particular site. * MOBILE DEVICE SUPPORT FOR WORLDCLIENT (MDaemon PRO only) * Support for WAP devices has been integrated into MDaemon / WorldClient. A new theme using the WML standard has been incorporated into WorldClient's templates directory. This theme will be sent by WorldClient when the requesting device reports that it supports WML. The WAP enabled device must support WAP 1.0 or higher. Users of mobile devices like cellular telephones will be able to easily access their email using WorldClient. The WML theme must send the username and password in a manner that would normally show up in any server log files. WorldClient's logs are filtered so that no password will be visible through the logs. However, other server logs (if running under IIS) will reveal information based on server log settings. This could be a security issue and those wishing to block this are encouraged to use XHTML compliant devices or to disable the ".WML" theme by renaming or removing it completely. * IMPROVED BACKUP SERVER PERFORMANCE * MDaemon is often used as a backup mail server for one or more domains using its powerful 'Gateway' feature set. MDaemon excels as a backup mail server. However, one of the drawbacks of MDaemon's 'Gateway' feature-set is that MDaemon accepts all mail sent to the 'Gateway' domain. This occurs because MDaemon doesn't actually have a copy of the account list that the primary mail server is using and so it has no idea whether a message is to a valid account or not. This has all changed. A new 'Verification' tab has been added to the Gateway GUI. With this tab you can configure LDAP query settings and have MDaemon automatically check with an LDAP server to see if an account actually exists or not. This has been optimized to work with LDaemon - a free LDAP server from Alt-N Technologies (http://www.ldaemon.com) but will work with other LDAP servers when properly configured. When a message for a Gateway domain arrives, an LDAP query will be performed to see if the address is valid. If so, SMTP processing continues. If not, the recipient is rejected with a 'user unknown' SMTP error. If the result of an LDAP query for the 'mail' attribute returns a valid result the address is considered valid. If the primary mail server is also an MDaemon/LDaemon combination then very little configuration is necessary. Just point the Gateway's LDAP settings at the primary MDaemon's LDAP 'Base Entry (for remote verification' value. This value is preconfigured by the LDaemon 2.10 installer and is available for manual editing via a new edit control on the LDAP options dialog box. The primary MDaemon will maintain a separate database on your LDAP server for use with remote authentication. The address book database is not sufficient because it is possible to hide accounts from the address book database. MDaemon will now publish lists and aliases both to the LDAP address book database and the new remote verification database. This is needed to allow the new Gateway verification feature to accept email bound for valid aliases. The installer will trigger MDaemon to update your LDAP server in order to populate it with this new information the next time MDaemon is started. If for whatever reason you would prefer MDaemon to not maintain the new remote verification database on your LDAP server simply blank out the 'Base Entry (for remote verification)' edit control on the LDAP options dialog box. * SKINNABLE COMAGENT INSTANT MESSAGING CLIENT * We've added skin support to ComAgent. This will improve the look-and-feel of ComAgent and allow your users to personalize it to their own tastes. ComAgent users will need to download and install ComAgent_SkinPack.exe from http://www.altn.com/Downloads/. CHANGES AND ADDITIONAL NEW FEATURES - ----------------------------------- o The Spam Blocker feature set has been enhanced. When you elect to parse IP's from 'Received' headers for Spam Blocker processing you can now tell MDaemon to skip the oldest XX 'Received' headers. Since it is often necessary to skip the oldest 'Received' header a default value of 1 has been set. You can change it from the Spam Blocker GUI. Separate settings are available for SMTP and DomainPOP collected messages. o A new option on the Security menu will allow you to setup a Site Security Policy. This is text that is transmitted to the sending server at the start of every SMTP mail session. It is usually something like "This server does not relay" or "Unauthorized use prohibited". Your existing policy.dat file will be editable from this new screen. You no longer need to prepend each line of your policy statement with "220" or "220-". MDaemon will automatically handle lines either with or without these prepended codes. o The installer was changed to install MDaemon in 'easy' mode by default. Also, first time installers who install using 'easy' mode will see a one time nag screen when MDaemon starts telling them that 'advanced' mode is required to get to all MDaemon's features and also telling them how to switch to 'advanced' mode. o When EHLO/HELO sends an IP as the parameter MDaemon will test this against the IP of the connecting host and act accordingly. If an IP mismatch occurs and the configuration calls for a 4xx or 5xx result code an appropriate statement will be used in the SMTP string. o The log window right-click menu contains a "Mail to support" option which lets you quickly highlight something strange in the on-screen log and email it to technical support. Actually, you can email it to anyone you want. o Added button to the Spam Blocker and Spam Filter GUI's which will tell Mdaemon to automatically create IMAP folders and filter rules for Spam. These folders and filters will be created when new accounts are added to the server. o Log file names on disk no longer contain spaces. Spaces are replaced with the '-' char. This is to make it easier to access the log files. o PTR and Spam Blocker lookups were improved. They no longer slow down other mail sessions. o An edit control was added to the Setup|Primary Domain|Domain/ISP tab where you can enter a 'Machine name'. This value is used in the Received headers and is great for tracking when you have several machines all acting as a single domain. Without specific names for each machine it is difficult to track the flow of a message - you'd have to use IP numbers which are harder to read. The primary domain name is used for the machine name if the latter is not explicitly provided. o Added a 'Security' top level menu to MDaemon and moved all the security related functions into it. This includes AntiVirus, content control, spam blocking and filtering, and relay/server access controls. o Added support for multiple toolbars but haven't done toolbar customization support yet. o At midnight each night MDaemon will execute MIDNIGHT.BAT (if it exists in the APP directory). MDaemon will not wait for the batch file to end. o MDaemon's initial startup code was optimized. o ComAgent's MAPI address book synch lets you choose any Contacts folder from your Personal Folders PST. o The logging code was optimized to save some CPU/disk cycles. o MDaemon will be more forgiving of certain malformed MAIL parameters. o WorldClient sessions will show the user's full name on the Session window. FIXES - ----- o fix to IMAP CREATE buffer overflow vulnerability o fix to Tools tab not updating when domains added/deleted/edited o fix to HELP link in GUI not working right o fix to automatic LDAP address book features requiring LDaemon o fix to WorldClient's message attachment download links from having problems with IIS and IIS Lockdown and/or URLScan o fix to server freezing when writing out alias file o fix to potential crash if connection drops during spam blocker lookup o fix to crash when processing certain malformed messages o fix to problems restarting services using ghost sessions o fix to SB lookups in MultiPOP sessions not handling DNS timeout right o fix to 'this list it private' email getting sent to the list itself o fix to CF gui bug when editing '...contained in file' rules o fix to improper Spam Blocker lookups on AUTH'ed sessions o fix to tarpit cache not being reloaded when editor closed o fix to postmaster notification when unknown local users on mailing lists o fix to Spam Blocker lookups being needlessly repeated after RSET command o fix to not able to shutdown when sessions stuck waiting for CF to finish o fix to not able to close session windows if they get stuck somehow o fix to orphaned sessions if FD_CLOSE occurs during CF processing o fix to alias.dat file reverse ordering when deleting lists o fix to non-buffered multiline POP responses causes socket errors o fix to non-buffered policy.dat files causing socket errors o fix to POP parser not working with certain commands ending in whitespace o fix to messages being sent with non-NULL reverse path errantly o fix to Content Filter not sending notifications with NULL reverse path o fix to LDaemon and WorldClient log panes not updating without focus o fix to potential crash in POP server if termination occurs during SB o fix to MD delivering local queue files without delete access to file o fix to 100% CPU when processing SMTP messages in certain cases o fix to log error when multipop.dat contained entries for unknown account o fix to content filter allowing notifications with blank FROM - ------------------------------------------------------------------------ - -- syafril - ------- Syafril Hermansyah<[EMAIL PROTECTED]> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) iEYEARECAAYFAj7mpUoACgkQJDdq0WWNVhbXsACgjJ/R+AQiAmCMyPG8sUy/aQQW hBYAn1sOfYItNl6qHDL4DEBfKQOpK2Kx =VL+f -----END PGP SIGNATURE----- . -- --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Mohon tidak posting dalam format HTML! Arsip : <http://mdaemon-l.dutaint.com> Moderator : <mailto:[EMAIL PROTECTED]> Henti Langgan : <mailto:[EMAIL PROTECTED]> Berlangganan : <mailto:[EMAIL PROTECTED]> Versi Terakhir : MD 6.8.0, LD 2.1.0, WA 2.0.4, MDAV 2.1.9, MDGW 1.0.4
