Release Notes for IMail Server v11.5

In this File

Main IMail v11.5 Release Notes

Other Important Links

System Requirements

IMail Folder Permissions and IIS Configuration

External Database Changes Upgrading from v11.02 or earlier

Registry Checker

Command Line Installations - (Silent Installs)

IMail Table of Product Features

IMail Getting Started Guide

For more information about Ipswitch components, click in the list below to read the release notes:

What's New in IMail Server v11.5

- New IMail Secure Server

IMail Secure Server is a new packaged product to be available for purchase on June 15th 2011. IMail Secure Server removes the often unnecessary features of collaboration and instant messaging to solely focus on e-mail security.

IMail Secure Server includes the following extra features:

- New Version for Commtouch Anti-spam Engine

- External Address Verification

External Address Verification is a new feature available to purchase for customers running under an unlimited license of IMail Server. This new feature will give IMail Administrators capability to verify and validate users before forwarding to the actual mail server. For more information, please visit: http://www.imailserver.com/products/external-address-verification

- New Realtime Whitelists

Realtime Whitelists are whitelist databases that store IP addresses and domain names of trusted sources. E-mail messages that find a Realtime Whitelist match will be considered trusted and further validation checks as set by the IMail Administrator will be bypassed.

Trusted Realtime Whitelist

A match made with a trusted realtime whitelist will bypass the following validations.

Important: Updates made to the Realtime Whitelist will not successfully update until the "Save" or "Apply" button has been clicked.

Note: Be sure that the SMTP and Queue Manager services have been restarted after updates have been applied.

For more details go to Web Administrator System > Realtime Whitelists and click Help.

- Web Administrator

- Services

- SSL Configuration Utility.

The private key size for a SSL Certificate is now optional, with a default of 1024 bits (512, 1024, 1536 and 2048) to allow the certificate a higher security level. This utility "sslUtility.exe" is located in your "../IMail" directory.

- Web Client Password Strength Validation

A new validity check has been added to the web client to validate user password strength against the IMail Administrators Password Strength as defined at the Domain Properties > User Login Settings. After user login, if the user's current password does not meet the required password strength then the user will be redirected to a "Change Password" page, which will require a new password that meets the password strength before allowing access to the web client for mail access.

- IMail Client Applications

- New Ipswitch Instant Messenger Client and Server Release

A new Ipswitch Instant Messenger version 2.1.1 is available with the IMail Server release. The following fixes and enhancements are as follows:

Defect Fixes and Improvements v11.5

Vulnerability

Ipswitch would like to thank Wietse Venema for reporting the vulnerability below that is now corrected: Vulnerability Note VU#555316 STARTTLS plaintext command injection vulnerability.

Web Client

Other Mail Clients

Services

Collaboration

Installs

Ipswitch Instant Messenger

Utilities

Known Issues

Product Description

IMail Server is an Internet standards based mail server system for Microsoft Windows 2003 and Microsoft Windows 2008. IMail Server includes powerful antispam management tools, a new Web-based administrator and client, and implements a series of programs that run as services including:

IMail Server also provides a List server for creating and managing mailing lists and a mail to pager/beeper feature that lets you set up aliases on the IMail Server that forward mail from a mail client to preconfigured pager or beeper address.

IMail Server Product Features

IMail Server Table of Products

Feature

IMail

IMail Premium

IMail Secure

Microsoft Exchange ActiveSync®

IMail Anti-virus powered by BitDefender®

IMail Anti-virus powered by Symantec™

IMail Anti-virus powered by Commtouch®

Commtouch® Zero-Hour Virus Protection

Solid, scalable, standards-based Email Server with Web Mail and List Server

Check2

Check2

Check2

 

 

 

 

 

Basic anti-spam with blacklists, Bayesian filters, phrase filters, and more.

Check2

Check2

Check2

 

 

 

 

 

Basic security with SMTP authentication, dictionary attack sensing, and anti-hammering.

Check2

Check2

Check2

 

 

 

 

 

Secure Instant Messaging is a network-based Client/Server system with Smart Tag support.

Check2

Check2

 

 

 

 

 

 

DomainKeys / DKIM is a domain-level e-mail authentication standard that uses public/private key encryption and DNS to prove e-mail legitimacy.

Check2

Check2

Check2

 

 

 

 

 

IMail Collaboration - Microsoft® Outlook contacts to transfer and sync with IMail Web Messaging and mobile devices.

Check2

Check2

 

 

 

 

 

 

Premium Anti-spam -by Commtouch Advanced Security Daemon (aka ctasd™) a plug-and-play email-borne spam and malware outbreak detection daemon.

 

Check2

Check2

 

 

 

 

 

Premium Anti-spam by Commtouch's GlobalView™ Mail Reputation Service (IP Reputation) fights unwanted mail at the perimeter, reducing incoming messages at the entry-point, before these messages enter the network.

 

Check2

Check2

 

 

 

 

 

Microsoft Exchange ActiveSync® allows synchronizing their e-mail, contacts & calendars with their mobile devices.

 

 

 

Check2

 

 

 

 

IMail Anti-virus powered by BitDefender®.

 

 

 

 

Check2

 

 

 

IMail Anti-virus powered by Symantec™

 

 

 

 

 

Check2

 

 

IMail Anti-virus powered by Commtouch®

 

 

Check2

 

 

 

Check2

Check2

Commtouch® Zero-hour Virus Protection

 

 

Check2

 

 

 

 

Check2

IMail Collaboration

IMail Collaboration is now integrated into all IMail Server products to allow all users the greatest benefit for data sharing. IMail Collaboration incorporates the capability to share Outlook data, such as calendars, tasks, contacts, distribution lists, notes, and e-mail for all IMail users. In addition to sharing users' personal folders with other users, IMail Collaboration lets you define public shared folders such as shared contact lists and holiday calendars with other users.

IMail Collaboration now has the capability to allow all users to synchronize their mobile devices with their Outlook folders to include e-mail, contacts, calendar, tasks and notes. Users can maintain their contacts and calendar appointments from either their computer or mobile device, and remain synchronized. See the IMail Administration Help > System Settings for more details on enabling this feature.

Installing/Upgrading/Repairs

IMail Server Installation

Registry Checker - Regcheck.exe is run automatically during a repair or upgrade, and can also be run from the command line. Regcheck troubleshoots registry conflicts during upgrades and repairs.

Ipswitch IMail uses InstallShield® Wizard to install the IMail components on your computer. Use the on-screen instructions to select the installation features that set up the mail server to your preferences.

The installation program automatically configures Microsoft Internet Information Services (IIS) 6.0 or later and Microsoft® .NET Framework 2.0 or later. It also sets user permissions automatically; however, if you need to configure permissions manually, the following Default IMail Permissions and Configuration must be set on your mail server to make it fully functional or for administrators who do not want to use the default configuration, you can use the Non-default IMail Permissions and Configuration. If you need to configure IIS manually, see IIS Settings. For using IIS Virtual Directories, see Using IIS Virtual Directories.

Starting Web Administration and Web Client

After installation, you have the option to launch the IMail Web Administration automatically. If you choose not to launch IMail Web Administration automatically, in your browser address box, type the IP address or domain name of the IMail Web Server followed by the path where you installed the Web Administration.

For example:

To launch the Web Client, in your browser address box, type the IP address or domain name of the IMail Web Server followed by the path where you installed Web Client.

For example:

Web Messaging Notes for Upgrading

The Web Messaging templates have been redesigned and no longer support the Web template infrastructure implemented in previous versions of Web Messaging (included in IMail 8.2 and earlier). When you upgrade to IMail 2006 and later, the previous versions of the Web templates are not functional.

Note: Port 8383 is no longer the default port for Web Messaging, as IIS by default uses port 80.

Secure Sockets Layer (SSL version 3) Notes

The private key file is protected using a password specified in SSL Configuration Utility. This password is required for decoding the key file while loading the SSL server. This password is stored in the registry and automatically retrieved during the loading process of SSL Server. The registry path for IMail is usually SOFTWARE\Ipswitch\imail\ssl. The registry path must be correct; otherwise an error message is generated and the files will not be created.

IMail Collaboration Installation

Changing Web Client Default Directory (Redirect)

To set a redirect so Web Messaging users do not have to use \IClient in the URL for Web Messaging:

  1. Click Start > Programs > Administrative Tools > Internet Information Services. The IIS console opens.
  2. Right-click IClient (usually located under Web Site > Default Web Site).
  3. Select Properties. The IClient Properties dialog box opens.
  4. In the Execute Permissions list, click Scripts only.
  5. Copy the directory path in the Local Path box.
  6. Click OK.
  7. Right-click Default Web Site.
  8. Select Properties. The Default Web Site Properties dialog box opens.
  9. Click the Home Directory tab.
  10. Paste the directory path you copied from the IClient dialog box Local Path box into the Default Web Site Properties dialog box Local Path box.

Downgrading

Downgrading from v11.5 to v11.03

Customers requiring a downgrade to v11.03 can follow these simple steps:

  1. Use the "Remove" option to uninstall the IMail Server
  2. Do NOT check the option to remove the IMail Registry keys.
  3. Upon successful removal of IMail Server v11.5, Re-install IMail Server v11.03.

Downgrading from v11.5 to v11.02 and Earlier

Customers with SQL/Access for User Database

Note: If the Administrator has a database backup made prior to the upgrade, a simple restore by the Administrator is all that will be necessary for downgrading the SQL/Access user database.

Customers downgrading with no user database backup from before the IMail Server v11.5 upgrade, will need to follow the instructions at the following KB:

http://kb.imailserver.com/cgi-bin/imail.cfg/php/enduser/std_adp.php?p_faqid=1206

Customers with IMail User Database

http://kb.imailserver.com/cgi-bin/imail.cfg/php/enduser/std_adp.php?p_faqid=1213

Correcting "Reject Connection" Option for Commtouch Premium Anti-spam

Customers using IMail Premium Commtouch Anti-spam with the new "Reject Connection" settings, will need to save the settings before downgrading, or modify the registry keys manually. The registry keys are located at: "HKLM\SOFTWARE\Ipswitch\domains\Domain Name\"

Registry Key

Type

Value

SpamConfirmed\Action

REG_DWORD

Valid values are 0-4
0 = None
1 = Delete Message
2 = Forward to Address
3 = Insert X-Header
4 = Move to Mailbox

SpamBulk\Action

REG_DWORD

Valid values are 0-4

SpamSuspected\Action

REG_DWORD

Valid values are 0-4

Correcting "Reject Connecton" Option for SPF Filtering

"HKLM\SOFTWARE\Ipswitch\domains\Domain Name\"

Registry Key

Type

Value

SPFError\Action

REG_DWORD

Valid values are 0-4
0 = None
1 = Delete Message
2 = Forward to Address
3 = Insert X-Header
4 = Move to Mailbox

SPFFail\Action

REG_DWORD

Valid values are 0-4

SPFSoftFail\Action

REG_DWORD

Valid values are 0-4

SPFTempError\Action

REG_DWORD

Valid values are 0-4

IMail Server Premium Downgrading

Warning: Downgrading from IMail Server Premium v11 and later to v10.01 or earlier will cause the Premium Anti-spam Services to stop working.

Read the KB article for details on downgrading to IMail Server v10, or v10.01:

http://kb.imailserver.com/cgi-bin/imail.cfg/php/enduser/std_adp.php?p_faqid=236

Once a user has installed and been licensed with Commtouch Premium services, he/she can no longer be downgraded to a previous version unless the Mail-Filter license has been backed up and saved to a path outside of the Ipswitch folder.

IMail Server Standalone Downgrading

Important: Downgrading from IMail Server v11 and later to IMail Server v10.02 or earlier will remove Ipswitch Instant Messaging and IMail Collaboration.

To downgrade the IMail Server back to a previous version without uninstalling:

  1. Open the Registry Editor and locate the following key:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{42A05E51-7514-4330-A784-B4C45412F04D}
  2. Change the Version value to 2000000 (hex).
  3. Launch the installation file and proceed as normal.
  4. When asked if you would like to convert your LDAP database, select no.

Note: The IAdmin and IClient virtual directories and web files will still be on the computer.

Important: Mailbox sizes are corrupted after downgrading IMail 11 or later to an earlier version (IMail 8.x). If you have quotas set up, they will fail. To correct this, delete the .uid and .xml files.

Important: When downgrading IMail 11 Server or later to a previous IMail version, you need to delete the configuration.xml file from the top-level IMail folder

Uninstalling

Uninstalling IMail Server

  1. Open the Add/Remove Programs applet in the Windows Control Panel.
  2. Select the IMail Server Edition you want to un-install.

Note:
• Removing IMail Server using the Add/Remove Programs does not delete the IMail directory or the subdirectories and files. These must be deleted manually.
• Everything is deleted in the Windows registry under HKEY_LOCAL_MACHINE\Software\Ipswitch\IMail (only the Ipswitch key is not removed).
• Directories and files created by "setup.exe" are removed if they have not been modified. For example, if you have not added any users (and root never gets mail), the Users directory is removed. If these directories have been modified (i.e. the root or users accounts have received mail), you must remove them manually.

Removing IMail Collaboration

IMail Collaboration is a component of your IMail Server. To remove only IMail Collaboration select the Modify option in your IMail Server.

  1. Open the Add/Remove Programs in the Windows Control Panel.
  2. Select your IMail Server edition and click the Modify button.
  3. This will initiate the IMail Server Install program, click Next until the Program Maintenance window and select Modify.
  4. Click the icon Custom Install Options by Collaboration and select "This feature will not be available", and click Next.
  5. Click Install to initiate the removal of IMail Collaboration from your IMail Server.

For More Information

For technical help and solutions, visit our Support Center at www.imailserver.com/Support/ featuring a knowledge base, user guides, discussion lists, patches, upgrades, and live technical support options.

Copyright

The software described in this document is furnished under a license and may be used or copied only in accordance with the terms of that license.

Copyright © 1995-2011 by Ipswitch, Inc. All rights reserved. IMail, the IMail logo, WhatsUp, the WhatsUp logo, WS_FTP, the WS_FTP logos, Ipswitch Collaboration Suite, Ipswitch Collaboration logo, Ipswitch Instant Messaging, and the Ipswitch Instant Messaging logo, Ipswitch, and the Ipswitch logo are trademarks of Ipswitch, Inc. Other products or company names are or may be trademarks or registered trademarks and are the property of their respective companies.

No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transferred without the expressed prior written consent of Ipswitch, Inc.


Ipswitch Logo