Hallo,
MDaemon developer publish Critical Update MD041823 sore ini.
https://mdaemon.com/pages/downloads-critical-updates
Update ini mencakup 2 hal utama:
- Menghapus Cyren AV dan Cyren Outbreak Protection menggantinya dengan Ikarus
AV.
- bug fixed "Vulnerabilities for Denial of Service (DOS) and Cross-Site Request
Forgery (CSRF)".
Bagi yang run Windows Firewall dan Windows Antivirus di server MDaemon, maka
perlu memasukkan task/service
\\mdaemon\securityplus\Ikarus\scan.server\bin\scanserver_w64.exe
dan
\\mdaemon\securityplus\Ikarus\scan.server\bin\scupdate_w64.exe
kedalam "allow apps or features through
windows firewall" di Windows Defender Firewall dan "Process exclusions" di
Windows Defender Antivirus.
https://www.mail-archive.com/mdaemon-l@dutaint.com/msg47689.html
Rekomendasi AV scanning yang diaktifkan: keduanya.
http://mdaemon.dutaint.co.id/mdaemon/23.0.1/antivirus.html
Virus Scanning Engines
[x] Use the ClamAV engine to scan messages
[x] Use the IKARUS Anti-Virus engine to scan messages
--
syafril
Syafril Hermansyah
MDaemon-L Moderator, run MDaemon 23.0.1 release
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.
Org yg bijaksana adalah yang mengetahui sejauh mana dia bisa pergi terlalu jauh
-- Jean Cocteau, born 1891
--- Begin Message ---
MDaemon-Technologies_logo_large
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88f3pdr7V1-WJV7CgP0WVYXklb6kPykvW3qYtwQ71z6ZQW6zC5kk8CLZ0gW86B4Gd2YGBCFW1ycxyn8tFqypW17JL9F4tpV5lW5rn-Q251_KKsW8KCvq38ymtj1W3j-Zjw8srGRnW8y6tvX7gbGM7W4CYSw87KPsCXW8pTDYC1mckBhW5ZP7F16lYTrBW7kC0Q_8P3qvsW1bh7YF2FMVj8W4sx7hd6P6xz6W7nHCBq3PYKzGTbH4b7rvrY-W6Zvm9C4wTJbwV8BSxR6F_W8MN6xhNJn7fwm8W2zHHxF5ZRChQ3nMN1
)
Software Critical Update Notification
Hello Syafril,
Action Required
We have released a Critical Update that affects versions 18. x.x through 23.
x.x of MDaemon Email Server software and version 9. x.x of SecurityGateway for
Email software version 9. x.x.
1. New Malware Detection (antivirus) Engine for MDaemon Antivirus
The Cyren Malware Detection (antivirus engine) has been replaced and Cyren's
proprietary Recurrent Pattern Detection/Outbreak Protection service has been
removed (no longer available). This update adds a new Malware Detection
(antivirus engine) to the MDaemon Antivirus feature in the MDaemon email server
and SecurityGateway software.
2. Vulnerabilities for Denial of Service (DOS) and Cross-Site Request Forgery
(CSRF)
The MDaemon Development Team has built and tested a patch to correct a
potential vulnerability in MDaemon Email Server and Webmail (Worldclient). This
vulnerability may impact all browser types.
Simply download and install the appropriate patch listed on the Critical Update
page
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88S3pdrLV1-WJV7CgCM_W8BHDQ61qmzhWW5xCQtQ33Zb-XW693SJk2Gd5YzW5RdrH66x7nHkW55vJ4D4CnMcQV_Qj4Q6s4GMmN8RKBZRRKm9cW2rgzx087FRmJW862mNK8j2T7_W55HjkZ9lXgpGN5-kBpy_lpXxW4Vwvh62kzh6RW1QQ7zK5MNZ27W3ftgKy5jlqC1W15YG3-4ccG3JW7NLYw42R9H45W42gYzx24m54zW6JMZTT9hNZx9W8Qmm_05P4LMbW4Kfy9881BSkVW82GCDh2cdp85W5GBLnW5zPm3LW94YV4y8mT12-W1LJFSv1FPjhyW32X-ZG4zQGdxW74C5328N7mJJ3lJ31
) . There is no requirement to renew your license to obtain the update.
However, users of earlier, unsupported versions of MDaemon are also encouraged
to upgrade to the latest version to ensure they have the latest product and
security features.
Additional questions can be answered by contacting the Support Team.
Thank you,
Kevin Beatty
Vice President, MDaemon Technologies
kevin.bea...@mdaemon.com (mailto:kevin.bea...@mdaemon.com)
+1 (817) 601-3222 ext. 214
MDaemon Security Patch
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88S3pdrLV1-WJV7CgCM_W8BHDQ61qmzhWW5xCQtQ33Zb-XW693SJk2Gd5YzW5RdrH66x7nHkW55vJ4D4CnMcQV_Qj4Q6s4GMmN8RKBZRRKm9cW2rgzx087FRmJW862mNK8j2T7_W55HjkZ9lXgpGN5-kBpy_lpXxW4Vwvh62kzh6RW1QQ7zK5MNZ27W3ftgKy5jlqC1W15YG3-4ccG3JW7NLYw42R9H45W42gYzx24m54zW6JMZTT9hNZx9W8Qmm_05P4LMbW4Kfy9881BSkVW82GCDh2cdp85W5GBLnW5zPm3LW94YV4y8mT12-W1LJFSv1FPjhyW32X-ZG4zQGdxW74C5328N7mJJ3lJ31
)
Contact Support
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88y3pdrrV1-WJV7CgJnLW1TT8hV8L4fdCW113T-m8ks2wzW5MrfQZ6N6w5pVbCp5f96M-pBVNp8nZ9g3LsLW70tZcq1fB4dbW7HHbQr5g2JQyW82cNTP2lgcHhV4bvfz5VYt2CW8kcplj7B6TVZVzfy8P52GY4BVJmKRx76_1-dV_0DZz3hCVskW7bjz2k5ZL4tFW8N0jFv8b10PzW91zmxh5q-WhjW1vk7v62fPMJDW2wg2Lv4Tv15WW5znw6h7fxb5NW7GVLD33m29lGW3NHN-n3P_8yVW70Z4BX8bBn3bW3zJk9B3jyX93W65F1rR7-Dbg_35pl1
)
MDaemon Technologies, 4550 State Hwy 360, Suite 100, Grapevine, TX 76051, US,
+1.817.601.3222
Manage preferences
