SpamSentinel Version 7.7.0.5 STILL the best anti-spam and anti-virus solution for Domino! Release Date: September 2010 (Note: Final Version # may vary) Welcome to SpamSentinel Version 7.7! Overall, SpamSentinel 7.7 is an entirely new application from the ground up. We have updated our code to the latest releases of our provider SDKs. We have streamlined and optimized numerous areas of code making this our best version ever. SpamSentinel 7.7 is more accurate, faster, and more robust than ever before. Version Highlights: 1) All new code from all our major providers is included in this release. Blocking rate continues to average 99.6%+ with near-zero false-positives! 2) This is now our second major release supporting Domino 8.5.1x64 and higher. We have dropped support for Windows NT 4.0. All downloads (including non-Windows operating systems) are available at http://www.maysoft.com/ss 3) FREE ADD-ON! Manage-By-Example (Version 2.04a)- We recommend customers use the Junk Mail folder for delivery of Undecided mail (Spam-B). For most customers, this completely replaces the daily report. To learn more, download the installer and view a one-minute video clip: http://www.maysoft.com/mbehelp.nsf 4) Regular Expressions are allowed by enclosing the whole expression in double square brackets in the Word Block field. For example: [[regular expression]]. Regular Expressions provide advanced searching and matching capabilities far superior to plain word lists to further improve blocking performance. This functionality has also been included in our updated Policy Management function for added power. 5) SpamSentinel Reporting for 64-Bit installations is now supported and included in the full installer. 6) Policy Management Features have been updated and enhanced. Click here to learn more about our previous release: Improvements in 7.6.2.7 SpamSentinel Version 7.7.0.5 Improvements SpamSentinel Manager 2.6.2.6 Automatically detect the version of the Agent Manager. Format Domino 'tell' commands based on the Agent Manager version. Performance and stability updates. SpamSentinel Monitor 2.6.2.9 Safe Start/Shut Down: The SpamSentinel Monitor task will not shutdown if it is unable to open the administration database, or read the server configuration document. The task will retry every 30 seconds, until it is able to read the configuration. This will prevent the Monitor from shutting down if the administration database is being compacted, or if fixup is running, during Domino server startup. The Monitor will respond to certain tell commands while waiting to read the configuration, such as the "quit" command. It will not respond to other tell commands, since it is not fully initialized yet. Previously, the Monitor would time out and SpamSentinel components would not load. Support for configurable anti-virus update download interval. The interval can be set between 1 and 72 hours, with a default of 8. The Monitor will read the AVEngineFolder and EnableAntiVirusSandbox fields from the server configuration document. The values will be saved to the Configuration.xml files in the Duo Engine folders. The Monitor will also read a new field from the server configuration document. The "EventLogExcludeMsg" numeric field will prevent the Engines from writing certain messages to the Windows Event Log. Currently, the field excepts the values 0 or 1. If the field is set to 1, then anti-virus warning messages (virus detected) will not be written to the Event Log. The Monitor will write this new setting to the configuration.xml file. Performance and stability updates. SpamSentinel Interceptor 2.6.5.2 Now has the ability to write to an alternate stats log database other than SpamSentinelAdmin.nsf. This is optimal for customers with multiple servers and/or customers who may have many years of history they wish to retain. The Interceptor will not process encrypted messages received through Notes mail. Instead, it will mark the message as dead, and allow it to be saved to the mail.box. Once saved in the mail.box, the SSRouter will pull it into the scan.box where it will be processed normally. Note: The 'Dead Mail' counter will increment when the message is saved to the mail.box, but the counter is not reduced when the message is moved to the scan.box. The counter could reach a maximum limit and potentially cause the Domino router to stop routing mail. A modification has been made for Signed Notes messages. A signed message can not be moved by the Interceptor to the scan.box, the seal will be broken. The Interceptor will mark signed messages 'Dead' and save them to the mail.box. The SSRouter will then pull the messages into the scan.box, using a different process than the Interceptor. Fix "%" sign bug when Notes converts canonical names in the SMTPOriginator field. Domino was crashing when the SMTP mail message 'From' or 'To' fields contained a percent sign. The crash occurs when Domino is preparing an error response to the connected server. To stop the crash, the Interceptor will no longer register for specific SMTP events. In order to not lose the functionality completely, a new value has been added to a new file called SSIntercept.ini. SSIntercept.ini file is only used in very specific situations, and is not a required file. It will need to be in the Domino application directory (where nserver.exe is located) The INI is only required in two situations: 1) When the interceptor needs to attach to the HTTP task for iNotes mail processing and 2) Allows the Interceptor to attach to the SMTP end events to deliver a custom message (As when you tell the Interceptor to reject a connection - See Advanced > Notes Domino > Interceptor Action on your SpamSentinel Server configuration document) To enable INotes processing set iNotes=1 in the [Services] section. Set INotes=0 to disable, or delete the key. To enable custom replies set EnableReply=1 in the [SMTP] section. Set EnableReply=0 to disable, or delete the key. Support for outbound scanning including iNotes clients and attachment restrictions, spam, viruses, policy management. SpamSentinel Duo Engines 3.0.0.5 New SpamNet engine 1.6.0.3 New Commtouch engine 6.2.0.34 Engines recompiled with the Norman 6.6.2 SDK. This new SDK contains fixes for crashes and fixes for dynamic linking in Windows. Engines will also check the MaxConnections value from the Configuration.xml file. If the value is less than five, the value is set to five. Specify Norman path in Configuration.xml file Enable or disable Norman Sand box in Configuration.xml file Asynchronous posting of QOS messages to Maysoft Improved startup sequence. The new Engines will read the "<EventLogExcludeMsg>" tag from the configuration.xml file. If the value is 1 then "virus detected" warning messages will not be written to the Windows Event Viewer log. Performance and stability updates. SpamSentinel Router 2.6.2.4 Performance and stability updates. SpamSentinel Scanner 7.7.0.5 Now utilizes a worker thread pool to process messages more efficiently. The new Scanner has to wait for worker threads to complete before shutting down. Previously, if the Scanner unloaded the Notes API, any open threads would risk a Domino crash when they attempt to make Notes related changes. This Scanner update eliminates the risk of a Domino crash. While waiting for the threads to end, the Scanner prints the message "Waiting for <number of> threads to finish" every three seconds to inform the user of the shutdown progress. Scan for restricted attachments nested inside Zip file attachments. When this new feature is enabled, the Scanner will check if a file is a Zip file. If it is, it will compare the contents to the restricted attachment list. If a zipped file matches the restricted attachment list, the (whole) zip file is blocked. Policy management has been re-enabled and updated. The word searches have been converted to regular expression searches. This will allow for more powerful and accurate searches, and pattern matches. Restricted attachments has been updated with a new option to allow scanning for restricted attachments in outbound messages. The new option will not quarantine the message, or notify the sender (like the current option does). The restricted attachments will be removed, and the message will be sent. Update to avoid an issue in Domino 8.5.1, which allowed for some deleted messages to be reopened causing data corruption and Domino instability. Update to avoid Domino startup issues when Domino is not in the system PATH, or when the PATH string is invalid. Update to avoid buffer overruns when a mime part in-line file name is longer than the Notes file name limit. Option to perform a Black List lookup of the email "From" field. Enhancement to read additional categorization information from RBL black lists. Enhancement for checking machines to allow multiple Scanners to run on the same computer, and Domino server. Enhancement for checking machines to process mail on HOLD or DEAD. Note: Additional software is required. Please see technical support for assistance. Fix for a problem where restricted attachments are not removed from the user 'notify' message, when the 'Quarantine / Notify' option is selected. Performance and stability updates. SpamSentinel Reporter 2.0.3.0 x64 Compatible! Converted code to .NET Framework. Creation of a worker thread pool to process tasks more efficiently. Fix for truncated spam reports, when processing large volume of reports. Performance and stability updates. New threading code to avoid timing issues and service stalls created by other third party products. The server configuration document must be updated to adjust the max thread count of the Scanner and Engines to make the best use of this. Defaults are good for 99%+ of all installations. New threading code for better performance, and a fix for high volume customers who experience the report 'truncation issue'. SpamSentinel Administration Changes Configuration Document - White/Black Lists > Blacklists > IP Checks - You may now specify IP addresses or an IP range using * to exclude from IP checks (Realtime Blacklists). Note this is not the same as excluding an IP address from checking altogether as found in the Whitelist section. Configuration Document - Advanced > Message Logging - You may now exclude certain events from being logged to your logging database. We recommend using Logging sparingly as it can be resource intensive. Configuration Document - Anti-Virus & Attachments > Restricted Attachments > Scan Zip Files for Restricted Attachments - This allows the administrator to specify attachment types to restrict if included in the zip file. The entire zip file is restricted if it contains a restricted attachment. Configuration Document - Advanced > Outbound > Restricted Attachments - A new feature has been added to restrict matching attachments outbound. This does NOT include Zip scanning as above. Configuration Document - Policy Management - Separate controls have been made for Inbound and Outbound policies. Use of regular expressions is also included. Configuration Document - Start/Stop Windows Services - Has been moved from Auto-Update tab to the Advanced > Notes/Domino tab. Configuration Document - Anti-Virus & Attachments - Some fields regarding proxy usage and communications have been removed. This feature of the product will use the communications options selected on the Advanced > Port Options tab. Configuration Document - AutoUpdate tab - A number of unused fields have been removed. Configuration Document - AutoUpdate tab - Download path is now editable. Any downloaded installers from Mayflower will go to this folder. Please be sure the path exists on disk. Configuration Document - Advanced > Before Version 7 - Tab has been completely removed. None of the settings are applicable. Health Check - A number of fields have been removed that are no longer applicable. SpamSentinel Policy Management Changes New field 'EnablePolicyOptions7' added to avoid accidentally enabling old Policy Management New field 'PolicyActionInbound' and 'PolicyActionOutbound' added to allow for separate in and out bound action settings Policy management 'white list' enabled for inbound and outbound messages Security bypass enabled for inbound and outbound messages (messages copied to security mail box) New field name 'SpamS_MsgDirection' added to PMLog document (values 'In' or 'Out') A possible bug in Domino 8.5.1 seems to allow deleted messages to be opened, but not copied. It appears that the Scanner may be reprocessing 'deleted' messages, causing a drop in performance. The verified flag is now saved on deleted messages to avoid the Scanner processing them again. The Domino PATH is always added to the Application PATH. This avoids startup issues if there is a problem with the System PATH. Update to avoid buffer overruns when a mime part in-line file name is longer than the Notes file name limit. Update in mime part decoder to use std::string instead of char[] buffer for file name decode. Added TranslateStringToStdString function. Corrects a problem where the scanner does not properly promote a message when it contains a virus. For spam messages, if the message is a Spam-B or a Spam-C and contains a virus, it is possible that the message will not be promoted to a Spam-D. In addition, a Spam-B could get delivered to the user with the virus still attached. Non-Windows/Checking Machine Installations (AS400/Linux/Solaris) There were no significant changes to this code stream. As of 7.6.2.7 the behavior of this version of the product performs the same as the Windows-version. Note the SpamSentinel Router is not installed in non-Windows Domino environments as it is not needed. Mail is processed in the mail.box as opposed to scan.box(es). SpamSentinel: It just works! MayFlower Software (978) 635-1700 http://www.maysoft.com/ ©Copyright 2010 MayFlower Software, Inc. - All rights reserved worldwide.