-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hallo,
MDaemon 8.1.0 release ftp://ftp.dutaint.co.id/altn-mdaemon/md810_en.exe - ----------------------------------------------------------------------------- MDaemon Server v8.X Release Notes - ----------------------------------------------------------------------------- - ---------------------------- MDaemon 8.10 - July 26, 2005 - ---------------------------- SPECIAL CONSIDERATIONS - ---------------------- o The following entries will be automatically added to your Tarpit whitelist file (NoTarpit.dat): 127.0.0.* 192.168.*.* 10.*.*.* 172.16.0.0/12 o The defaults for new installations will score -0.5 for SPF and DomainKeys "pass" results. Previously, this score was -2.5 which was thought to be a bit too generous. It is recommended that existing installations check and change their scores also. o The format of the DomainKeys signing file (DKSign.dat) was changed. If you are specifying optional selectors in this file you must now do so in a slightly different way. Open DKSign.dat with notepad and read the text at the top of the file to see how to use the "s=" to specify your optional selector values and how to use the new "d=" to specify a signing domain. MAJOR NEW FEATURES - ------------------ * INTRODUCING DKIM (DomainKeys Identified Mail) (MDaemon PRO only) * DomainKeys Identified Mail (DKIM) is the future for cryptographic signing and verification of electronic mail messages. It clearly identifies the signer and protects the content of the mail message. Alt-N has been working directly on the DKIM specification with representatives of Yahoo, Cisco, IBM, Sendmail, and others. It was recently submitted to the IETF for public review and a draft can be obtained at http://www.ietf.org. More information on DKIM can be found with a Google search or here: http://www.altn.com/press/press_release.asp?ReleaseID=137 DKIM allows you to cryptographically sign your email messages using your own unique "key". DKIM capable software which receives your signed mail can verify your signatures and apply local policy appropriately. The DomainKeys verification and signing tabs within the GUI were changed in order to generalize some of the text and to insert options to create and verify DKIM signatures. * GREYLISTING (MDaemon PRO only) * Support for Greylisting was added. A new GUI for configuring it is available at Alt+F1. Greylisting is a spam fighting technique which exploits the fact that SMTP servers must retry delivery of any message that receives a temporary error code. The concept is that a message arrives, is refused by greylisting with a temporary error for a period of time (say, 30 minutes), and will be retried later by the sending mail server. It's believed that only genuine servers bother to retry delivery while spam tools just try once and move on. It's important to realize that this technique deliberately delays "good" mail as well as bad. But, "good" mail should be delivered by a genuine MTA (not a spam tool) and as such it will eventually arrive, although it's delivery will be delayed. You can use options on the new Greylisting configuration screen to limit the length of time that your server will refuse a connection but you can not control the length of time the sending mail server waits between retries. There are several traditional problems with greylisting and so we've had to add several switches to mitigate its negative side-effects. For example, a problem occurs when a sending domain uses a pool of mail servers to send outbound mail. Since a different mail server is used with every delivery, each attempt appears to be a new connection to the grey- listing engine. This can multiply the length of time a message is grey- listed. We've coupled SPF with greylisting to solve this problem. If the sending domain publishes SPF records, they will presumably list all the IP's of the entire pool of servers and we can take that into account inside the greylisting engine. Secondly, we've added an option to ignore the IP of the sending mail server completely which, while lowering the security of greylisting, completely solves the server pool problem. Second, greylisting traditionally entails a large database since each incoming connection must be tracked. In MDaemon, we've minimized the need to track connections by placing the greylisting feature nearly last in the processing sequence. This allows all MDaemon's other options to refuse a message prior to reaching the greylisting stage. As a result, the size of the greylisting data file is relatively small and since it is memory resident there is little practical performance impact. Thirdly, elaborate whitelisting options are available to minimize the impact of greylisting on "good" mail. Greylisting has its own whitelist file but also an option to use your users private address book files as whitelist databases. So, mail to a user from someone in that users address book can be excluded from greylisting. Messages sent to mailing lists can be excluded as well. Lastly, the greylisting database polices itself by removing entries that remain unused for a period of time. For more information on Greylisting visit Evan Harris' web site at http://projects.puremagic.com/greylisting/. CHANGES AND ADDITIONAL NEW FEATURES - ----------------------------------- o Local mail is now eligible for cryptographic signatures. This was needed to cover use cases such as sub-domains, gateways, mail sent from one local domain user to another local domain user, etc. o A caching system for LDAP gateway lookups was added. The system is enabled by default and caches results for 15 minutes. You can disable the system or change the default TTL by editing MDaemon.ini with notepad here: [LDAP] CacheLookups=No (default Yes) LDAPTTL=15 Cached results are stored in LDAPCache.dat and can be reloaded after any manual edits by creating LDAPCACHE.SEM in the APP folder. This will greatly speed up LDAP processing for incoming gateway mail. o Updated Authentication-Results header to draft-02 form. The current draft reads that multiple AR headers are required when "auth'ing" different mail characteristics. So, you could see up to three AR headers now rather than one. o dnsBL lookups will always be done after the first RCPT command now. This allows other checks to possibly refuse the message beforehand thereby reducing the need for DNS overhead. o Whitelist files which list IP addresses will match on sub-strings now. For example, it is no longer required to configure "10.0.*.*" in order to match "10.0.0.1" or "10.0.0.10", etc. A simple "10.0" will do the job (but the old method is still supported). This is to make MD compatible with publicly obtainable whitelist files. Also, comments to the right of actual data are acceptable as long as they are delimited by the # char. For example: 10.0.0 # local LAN subnet o "SMTP session successful" will only be logged if (a) an incoming session successfully delivers a message and MDaemon accepts it and (b) an outgoing session successfully delivers a message and the remote server accepts it. Anything else will get an "SMTP session terminated". o Updated error message text when entering an invalid name for a secondary domain. o MDaemon no longer exempts RAW messages from content filter processing using the "cf" as first two chars of the file name trick. Use "pd" to achieve this (makes consistent with other queue processing code). o MDaemon will now create three X-Lookup-Warning headers (one each for failed MAIL, HELO, and PTR lookups). This allows finer grain filtering. o Changed X-MDSPF-Result header to be consistent with X-MDDK-Result (i.e., X-MDSPF-Result: <pass/fail> (machine name)). o Added switch to Misc. Options to disable the insertion of a Sender header in list mail. However, if you are cryptographically signing list messages with DomainKeys the Sender header MUST be inserted anyway and this switch will have no effect. o Moved new list welcome message subject edit box from the Headers tab to the System tab in Misc. Options GUI. o DomainKeys signature headers will be stripped from list messages unless you have configured MDaemon to resign your list messages. o It is sometimes useful to pass the full email address rather than just the mailbox alone to Windows when authenticating users who are using the "dynamic NT authentication" feature. To achieve this, set the following switch in MDaemon.ini: [Advanced] uPNLogon=Yes (default No) Also, using "\\NT_ANY" in the account's password field may be required. o Mailing list default welcome files were updated. You can now include the following macros (these macros only work in list welcome files): $LISTNAME$ - expands to the name of the list (i.e.: md-beta) $LISTEMAIL$ - expands to the email address of the list $LISTDOMAIN$ - expands to the domain hosting the list To see a new default list, create a new list welcome file using the CREATE button in the list editor GUI. o Cleaned up code related to list subscribing in several places. o The IMAP commands that return a user's folder list and the WorldClient code to generate a folder list have been optimized. o Added icons to WorldClient folder options page to show folder type. o Calendar events imported from iCal invitation are marked as private. o The subject field of iCal invitations created by WorldClient will be set to the calendar event's "notes" field. o The default "check for update" interval was changed from 7 to 14 days. o Improved the look of WorldClient's new account creation template. o WorldClient will give an indication of DomainKeys and DKIM validation on the message view window. FIXES - ----- o fix to startup problem under WS2003 sp1 and XPsp2 for some machines o fix to Authentication-Results not written to incoming list mail o fix to unknown user message sometime specifying wrong unknown user o fix to crashing associated with creating lists with long list names o fix to multiple iCal invitations may be sent for a single meeting o fix to WorldClient may not recognize that shared folders are enabled o fix to meeting planner not imported from ical meeting request o fix to meeting attendees not populated if the attendee record in the ical meeting request spans multiple lines o fix to unable to create new contact while viewing "All Contacts" o fix to MDaemon sending DATA when no RCPT had been previously accepted o fix to not retrying delivery on temp errors when using route slips o fix to initial account not in addr book on new installs o fix to postmaster AUTH protection not working when using external alias o fix to list sending welcome packet twice to new members o fix to DK sub-domain matching rules not applied correctly o fix to WorldClient created events not displaying properly in Outlook o fix to DK using envelope sender rather than From header to determine eligibility for signing o fix to routed mailing lists local copies sometimes missing Return-Path o fix to routed mailing lists taking longer than necessary to deliver to local list members o fix to CF generated notification emails not going through CF rules o fix to Content-Transfer-Encoding not preserved when forwarding to lists o fix to content filter quarantine directory traversal vulnerability o fix to possible access violation in MDaemon.exe o fix to IMAP server AUTHENTICATE and CREATE vulnerabilities o fix to WorldClient jscript error when dragging icon over folder list o fix to WorldClient reloading inbox when deleting last message on page o fix to multiple RBL cache lines added to X-RBL-Warning header o fix to the account editor's Shared Folders dialog not updating AclShLookup.dat for subfolders when renaming/deleting parent folders o fix to non-local spamlearn/hamlearn addressing not working properly o fix to 4xx bouncing mail when using the "route to ISP" delivery option o fix to WorldClient not sorting subject field properly in all cases o fix to MDUserComAPI not reading all elements in array variables o fix to MDUserComAPI requiring parenthesis around some variables (VBScript) - -- syafril - ------- Syafril Hermansyah -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFC5wVpJDdq0WWNVhYRAkNFAJ9zKOYuX+wZXP6e9gPgENleUkFWBwCcCFjx SRnuHYogxKmCBjwRj988bOQ= =kyWb -----END PGP SIGNATURE----- -- --[MDaemon-L]------------------------------------------------ Milis ini untuk Diskusi antar pengguna MDaemon Mail Server. Mohon tidak posting dalam format HTML! Arsip : <http://mdaemon-l.dutaint.com> Henti Langgan : <mailto:[EMAIL PROTECTED]> Berlangganan : <mailto:[EMAIL PROTECTED]> Versi Terakhir : MD 8.0.4, LD 2.1.0, WA 3.1.3, MDAV 2.2.9, MDOC 2.0.2
