Hi,

MDaemon 13.6.1 release pagi ini

ftp://ftp.dutaint.com/altn-mdaemon/md1361_en.exe
http://www.altn.com/Downloads/MDaemon-Mail-Server-Free-Trial/


    MDaemon 13.6.1 - December 11, 2013


      SPECIAL CONSIDERATIONS

  * [12105] The default settings for two SMTP authentication related
    values have changed. The option to require SMTP authentication when
    mail is from local accounts and the option to require authentication
    credentials to match that of the email sender are both now enabled
    by default. If this is not to your liking you can disable both
    options at Ctrl+S|Sender Authentication|SMTP Authentication.
  * [11579] The "STARTTLS Required" list found at Ctrl+S|SSL &
    TLS|STARTTLS Required List is now also applied to the MAIL FROM
    value during an SMTP session (in addition to the EHLO and IP).  If
    MDaemon receives a MAIL command followed by an email address which
    is on the "STARTTLS Required" list during a session which has not
    been secured then the MAIL command gets a "454 STARTTLS Required." 
    What happens after that is anyone's guess.  Most clients will just
    drop the connection and that's the end of it.


      MAJOR NEW FEATURES


      [6865] SIMPLE MESSAGE RECALL (MDaemon PRO only)

A new page has been added to F2|Server Settings which will allow you to
configure MDaemon's simple message recall system. It works like this: an
incoming message from an authenticated local user can be delayed for 1
to 15 minutes (you can decide how long). During this delay period the
message is simply left in the inbound mail queue. The idea is to provide
a grace period for your users to realize they need to recall a message.
Once the delay period expires the message is delivered like normal.
However, if during the delay period, the same authenticated account
which created the message to be recalled should also send a RECALL email
to the MDaemon@ system account which specifies the Message-ID of the
message(s) to be recalled then those recalled messages are deleted from
the inbound queue as if they never arrived and the recalled message will
not be delivered to anybody. This is the only way to guarantee that none
of the recipients of the recalled message will ever see the message.
MDaemon will notify the sender of the RECALL message as to the success
(or failure) of the attempt. The RECALL must be performed while the
message is still present in the inbound queue. After that, its likely
too late to guarantee that the recipients have not already seen it.
Accounts can not recall messages sent by other accounts and SMTP
authentication is required for each step of the process.  Only messages
from authenticated local accounts are subject to the recall delay. All
recall processing is logged to the Routing and Mail|MDaemon UI/log files.

Here's how to send a RECALL message (pick one): 1) From your mail
client's Sent folder right-click (or whatever your mail client requires)
and Forward As Attachment the email(s) that you want to recall, put
RECALL as the message subject and send that to the MDaemon@ system
account. 2) From your mail client's Sent folder view the headers of the
message you want to recall. Copy the Message-ID header value (the part
to the RIGHT of the Message-ID: string) to the clipboard. Create a new
message to the MDaemon@ system account and place RECALL plus the message
ID value on the subject. It should look something like this: RECALL
<5268dc1a.1020...@example.com>. Either of these methods work but only
the second is used if both are performed within the same RECALL message.
This feature is disabled by default. The default delay interval is 1 minute.

WorldClient may also be used to recall messages. WorldClient will
display a "Recall" button when viewing recent messages in the Sent Items
folder. If clicked before the recall time limit expires, WorldClient
will send a RECALL message to MDaemon. MDaemon will send an email back
to the user saying whether the recall was successful.


      CHANGES AND ADDITIONAL NEW FEATURES

  * [11123] Back by popular demand.  An option was added to
    Ctrl+O|Preferences|Headers which hides MDaemon software version and
    other identifying information when creating Received headers or
    responding to various protocol requests.  The option is disabled by
    default.
  * [12038] All system generated messages will now honor the
    Ctrl+O|Preferences|Miscellaneous option to go through the content
    filter (or not). Previously, several such messages ignored this setting.
  * [12058] Changed error text during account creation from "Mailbox
    and/or real name already in use" to "Mailbox already in use"
  * [12034] Alt+Q now launches the queue and stats manager (MDStats) app
  * [12011] Added ActiveSync for MDaemon product information link to
    Alt+M|ActiveSync|Server UI and reorganized the top level HELP menu
    to include several Alt-N product information, purchasing, and
    renewal/upgrade links.
  * [12096] Added size of statistics DB to F2|Logging|Statistics Log
  * [11923] Added more information to the MDStats configuration report.
  * [11096] DomainPOP and MultiPOP will move on to the next message when
    they get an -ERR response to a RETR command rather than terminating
    the session.
  * [12116] The option at F2|Server Settings|Servers "...refuses
    duplicate RCPT values within the same session" (see [10322]) was
    changed to "...ignores duplicate RCPT values within the same
    session."  MDaemon will accept and then discard the duplicate
    recipients rather than refuse them during the SMTP session.
  * [9071] Added new option to Ctrl+O|Preferences|Disk that lets you set
    the number of days to retain daily config file backups.  The default
    is set to ZERO which means never delete old backups.  Any deleting
    takes places as part of the midnight cleanup event.
  * [11947] The UI right-click log search option was removed.  It was
    very crude and could not be substantially improved.  It may be
    replaced in future by a stand alone app.  Until then any freely
    available text file tool can be used to search the log files.
  * [12119] Software update notifications are now sent to all global
    admins and not just the postmaster alias.
  * [11984] A new option was added to Ctrl+O|Preferences|System where
    you can customize the subject used when MDaemon sends mailing list
    digest messages.  The default is "$LISTNAME$ message digest
    $TIMESTAMP$ $ISSUE$."  These macros expand to the name of the
    mailing list, the time-stamp of the digest message creation, and the
    issue number.  MDaemon no longer inserts the text "special issue"
    into digest subjects.
  * [12085] An internal limit to the size of messages sent through the
    inline SMTP spam scanning feature has been removed.  The size
    setting at Ctrl+P|Spam Filter|Options will now govern whether inline
    SMTP scanning is performed on the message or not.
  * [11824] Even though addresses of this form are technically legal:
    "Arvel Hathcock"@example.com - MDaemon can't currently handle them
    properly so it will now refuse them during the SMTP session rather
    than accept the address and parse it wrong later.
  * [11671] The daily quota report email is now customizable and able to
    be translated.  See QuotaReport.dat in your MDaemon APP folder for
    information. You can also alter the subject of these report emails
    using a new option at Ctrl+O|Preferences|System.
  * [11503] MDaemon will better handle improperly formed (non-RFC
    compliant) message bodies.
  * [12157] Added Last Access column to Account Manager showing the last
    time the account was accessed.
  * [12151] The "...edit mail folder location" web access right has been
    completely removed. 
  * [10242] In the Account Editor the two password fields will light up
    red if the password does not match or violates policy.  Otherwise,
    green.
  * [11552] Added option to Account Editor|Account Details which allows
    you to configure an account to be exempt from the automatic password
    expiration feature.
  * [11474] Added a last access time to the bottom of List
    Editor|Settings so you can see whether lists are being used or not.
  * [12158] The ActiveSync device list at Alt+M|ActiveSync|Devices no
    longer includes policy nodes when there is no policy in force.  This
    saves UI processing time.
  * [10818] DomainPOP can now use the Spam Honeypot feature.  If
    DomainPOP parses out a Spam Honeypot address then it doesn't matter
    how many other addresses are also parsed because they are all
    ignored.  These messages go to the bayesian learning folder.  Also,
    DomainPOP can not use the Spam Honeypot sub-feature to submit the
    sending IP to the dynamic screening system.  DomainPOP does not know
    the connecting IP and doesn't need to even care.
  * [11447] Added new options to Ctrl+S|Screening|Dynamic Screen which
    let MDaemon watch accounts that receive more than X failed
    authentication attempts in a single day.  The default is 10 and the
    option is disabled by default.  Once the maximum number of
    authentication attempts have been reached in a given day the account
    can be frozen or the postmaster can be warned (or both).  If the
    account is frozen an email is always sent to the postmaster. 
    Replying to that email will re-enable the account.  The database of
    authentication failures is maintained in memory and gets reset on a
    restart and at midnight each night.
  * [10794] Added a new option to Account Editor|Attachments which lets
    you specify whether to extract attachments from inbound messages. 
    This defaults to true to maintain previous behavior.
  * [11545] Added a new option to Ctrl+U|Passwords which allows you to
    specify a number of passwords to remember.  When users change their
    password they will not be allowed to reuse old passwords.  The
    option is set to 0 (off) by default.  Since this is new, the current
    account passwords are not remembered. It won't be until passwords
    are changed that they start getting remembered. Salted hashes of
    previous passwords are stored - not the actual passwords themselves.
  * [10035] Added an "Edit File" button to Ctrl+U|Aliases which opens
    the Alias.dat file in a text editor.  This allows you to more easily
    edit and search around in the file.  Make whatever changes you want,
    exit the text editor, and MDaemon will reload the file.
  * [10677] Greatly improved Domain Manager loading time for sites with
    hundreds of domains.
  * [11724] Added a new option to Ctrl+U|Quotas which lets you disable
    accounts that have been inactive for more than X days.  The default
    is 0 (disabled).  Once the maximum number of inactive days has been
    reached, the account is disabled and an email is sent to the
    postmaster.  Replying to the email will reenable the account. 
    Processing is done as part of the midnight cleanup event each night.
  * [9222] Added a QUEUE.SEM file which you can create in the APP folder
    to enable/disable the mail queues.  This file can contain any number
    of lines but each one has to contain one of the following strings
    (one per line):  ENABLE INBOUND, ENABLE REMOTE, ENABLE LOCAL, or
    DISABLE INBOUND, DISABLE REMOTE, DISABLE LOCAL.
  * [9658] Added a new setting to Account Editor|Options which will let
    you configure whether the account should have the domain signature
    added to emails they send.  The default is yes, add the domain
    signature (if there is one).
  * [12174] The behavior of the Ctrl+T Groups and Templates editor has
    changed slightly.  All the settings on the Options page are now
    available for use with any template.  The only exception is that the
    settings to make an account a global or domain administrator can not
    be used with the New Accounts template.  This is to prevent the
    accidental case in which somebody might enable these options by
    mistake in the New Accounts template thereby making all new accounts
    into admins.  We don't want that to happen.  As a result of this
    work the global and domain administrator settings have been removed
    from the Account Editor/Template Editor|Options page and placed on
    their own Administration page. 
  * [3947] Added new option to Account Editor | Options which lets you
    exempt an account from the "Authentication credentials must match
    those of the email sender" global option.  This is disabled by default.
  * [11775] Active Directory monitoring will now honor the full last day
    for expired accounts before disabling them.
  * [5240] Added button to Ctrl+W|WebAdmin|Web Server which lets you
    edit WebAdmin's mailing list admins file.
  * [10122] Added option to Ctrl+Q|Mail Queues|Holding Queue to send a
    summary email of bad queue content.  This takes place at the same
    time as the holding queue summary email is sent and is in the same
    format.
  * [6214] Added two new scripting macros: $AR_START$ returns the
    autoresponder start date/time.  $AR_END$ returns the autoresponder
    end date/time.  Also, all user related macros previously unavailable
    for use are now eligible for use in autoresponder scripts.
  * [12191] The Hijack Detection settings were moved from
    Ctrl+S|Screening|Dynamic Screen to their own screen at
    Ctrl+S|Screening|HiJack Detection.
  * [9822] Manual activation page now allows you to select and copy &
    paste the relevant activation data.
  * [9825] You can now set the spam score for DNSBL hits from
    Ctrl+P|DNS-BL|Options.
  * [12088] Added WebAdmin.ini to the list of configuration files
    viewable via WebAdmin.
  * [12218] Added Catalan language to WorldClient.
  * [9841] Added Administrator, Frozen and Partial status icons to
    WebAdmin's Account Manager.
  * [12244] Added a "None" option to the WorldClient keyboard shortcut
    layouts.
  * [12275] the WorldClient Compose options now let you disable the
    check for the subject field being empty
  * [12174] WebAdmin now warns when elevating a user to administrator
  * [11408] WebAdmin now checks the Account Template and Group names for
    the presence of a comma
  * [11686] WebAdmin shows the name of the domain(s) that you are
    deleting in a confirmation prompt
  * [8860] The ActiveSync server will hide unsubscribed folders from
    clients if the user has "Hide unsubscribed folders" enabled in
    WorldClient.


      FIXES

  * [12094] fix to WorldClient may set a contact date field to the day
    prior when using a time zone different than the default
  * [12120] fix to installer allowing installation into root directory
  * [11617] fix to mailing list .grp files not updating settings and
    members when domain name changed
  * [12044] fix to some new account template settings not always being
    applied to accounts properly
  * [12089] fix to Whitelist@ and BlackList@ addresses not working when
    sending from an alias
  * [11653] fix to potential bogus error message when creating or
    renaming mailing lists
  * [11381] fix to VRFY command not honoring subaddressing system
  * [12148] fix to some text on Retry Queue page not being translated
    properly in WebAdmin
  * [11590] fix to Mail Folder Location option greyed out in WebAdmin
    (it is now able to be edited by Global Admins)
  * [11802] fix to LDAP query to a remote Active Directory root may fail
    with error 9
  * [12163] fix to unable to save Autoresponder in WebAdmin in certain
    circumstances
  * [12155] fix to non-admin Account menu permissions quirk in WebAdmin
  * [12164] fix to MDaemon GUI's Domain Manager lists upper case domain
    names before lower case ones
  * [12132] fix to virus name is not displayed in WebAdmin's "Viruses by
    Name" report
  * [12166] fix to the LookOut theme conflicting with the German
    keyboard shortcuts on the Mac when the user presses ALT+L to
    generate the @ symbol
  * [12175] fix to files attached to meeting invitations are not
    displayed on ActiveSync devices
  * [4258] fix to several places where a Winsock error might lead to
    orphaned .msg and .ctl files
  * [7067] fix to errant ACL setup in Mail Archive public folder
    structure if it was manually moved or deleted
  * [12183] fix to scripting error in WebAdmin's user editor when
    ActiveSync is not installed or active
  * [12185] fix to holding queue summary email not sent to CF Admins as
    configured
  * [2126] fix to removing a secondary domain does not remove all the
    accounts from ODBC storage
  * [7009] fix to forwarded message addressing problem at times when
    using SPF option to forward using local address
  * [12173] fix to WebAdmin pop-up dialogs display a "Sign Out" link.
    For pop-up dialogs this should be replaced by a "Close" link.
  * [12214] fix to minor sorting issues on WebAdmin's Holding Queue page
  * [12144] fix to two response messages are sent after accepting or
    declining a meeting invitation on an ActiveSync device
  * [12216] fix to the contact tooltips not disappearing in every case
    when a user hovers or clicks on a contact
  * [11465] fix to the LookOut theme not busting the cache for the
    external compose window
  * [12217] fix to unable to remove user account in WebAdmin if mailbox
    name contains "+"
  * [12195] fix to possible POP3 server crash after a Winsock error occurs
  * [12177] fix to MDaemon GUI ActiveSync sessions refresh issue
  * [12227] fix to the LookOut theme in IE11 where various context menus
    don't work
  * [12004] fix to WorldClient compose window closes without warning
    when saving a draft message fails
  * [12072] fix to reduced number of active connections possible when
    running as a service on Windows Server 2012
  * [12266] fix to Account Editor not selecting the correct domain when
    editing an account whose domain name is not lower case
  * [10308] fix to MDStats issues parsing IMAP logs
  * [11432] fix to Content Filter header search and replace corrupts
    From and To headers that contain encoded text
  * [11988] fix to Account Editor may corrupt the mailbox path when
    using a multibyte character in the full name
  * [11511] fix to ComAgent truncates file transfer filenames at 63
    characters
  * [11633] fix to WorldClient InstantMessaging.log character encoding issue
  * [5761] fix to postmaster alias may not work in folder ACLs
  * [12310] fix to unable to save MultiPOP settings in WebAdmin
  * [12320] fix to the SecurityPlus option to add a warning to the
    subject of messages with non-scanned attachments does not work
  * [12303] fix to default smart host "Allow per-account authentication"
    option does not work correctly
  * [12316] fix to ActiveSync sync issues with Android 4.4 clients
  * [12221] fix to calendar items created on ActiveSync clients have Low
    priority in WorldClient
  * [12277] fix to possible MDAirSync memory leak when processing
    FolderSync commands
  * [12276] fix to ActiveSync server may not send messages from Windows
    Phone clients
  * [12268] fix to possible error when using ActiveSync to accept a
    meeting request that was sent from an iCloud account
  * [12147] fix to meeting organizer is changed after accepting a
    meeting invitation using ActiveSync on an iOS device
  * [12159] fix to attachment downloads fail on some Samsung Android
    ActiveSync clients
  * [12170] fix to possible MDAirSync crash when running under IIS and IPv6
  * [12149] fix to contact birthday may be off by 1 day when using
    ActiveSync on an iOS device
  * [11417] fix to a potential script error when editing recurring
    events in the WorldClient LookOut theme



-- 
syafril
-------
Syafril Hermansyah

MDaemon-L Moderators, running MDaemon 13.6.1 SecurityPlus 4.1.5
Harap tidak cc: atau kirim ke private mail untuk masalah MDaemon.

Attachment: signature.asc
Description: OpenPGP digital signature

Kirim email ke