Version 6.0

Introduction
Installation
SysAdmin
Network
Objects
Storage
E-mail
Real-Time
Access
Services
Directory
Clusters
Applications
Miscellaneous
Licensing

WebMail
Pronto!
PBX

Introduction	Features	History	How To	Help Me

Version 4.2 Revision History

RSS

4.2.10 15-Mar-05
Valid Core License Keys: issued on or after 15th of November'2001.

Bug Fix: LDAP: 4.0: response to a final DIGEST-MD5 SASL challenge was processed incorrectly.
Bug Fix: SMTP: 4.1: initial prompt timeouts for "last" relays were shorter than timeouts for other relays.
Bug Fix: GROUPS: 3.2: the Remove Author from Distribution option could not be disabled in Directory-based Domains.
Bug Fix: CALENDAR: RRULE parsing could stop on the UNTIL parameter.
Bug Fix: HTTP: 4.2.3: inter-cluster Keep-Alive processing was broken.
Bug Fix: HELPERS: 4.2: failed helpers were restarted even when the Use option was disabled.
Bug Fix: LIST: 4.0: certain multipart messages sent to a list could crash the server.

4.2.9 04-Feb-05

SMTP: The Original Return-Path domain is used for DNS verifications when the Forwarded To option is enabled.
Bug Fix: WebUser: 4.2.7: under heavy load repeated failed access attempts to a closing session could crash the server.
Bug Fix: SIP: 4.2: transport=tls URI parameters were processed incorrectly.

4.2.8 30-Dec-04

SIP: External Gateway support has been added.
SIP: Media Proxies now support re-INVITE requests.
SIP: Media Proxy Loops are detected and eliminated.
FreeBusy: when Free/Busy info is built, the time zones associated with the Events are used instead of the default Server zone.
Calendar: Recurrent event conflicts are detected now.
SMTP: the Blocked Addresses to Remember option has been implemented.
SMTP: now warning messages are sent when individual recipients are delayed.
CLUSTER: the outgoing SMTP channels now use the Cluster name in the HELO/EHLO commands.
LDAP: now LDAP Provisioning allows a client to retrieve effective settings directly from the Account Manager.
Rules: recurrent Events can be auto-accepted now.
WebUser: Recurrent event display method changed, the calendarpart.wssp file updated.
WebUser: the Arabic dictionary file has been added. The RTL/LTR tags added to all Stock Skin pages to support Right-to-Left scripts and languages, the "ralign" elements added to the Mailboxes.wssp page.
WebUser: the German and Dutch dictionary files have been added.
WebUser: information about event conflicts is displayed (using the statusCode, conflictingID variables).
MAPI: the version 1.1.12 of the MAPI Connector is included. Custom From and Reply-To addresses are supported again, with WebUser Interface integration.
TFTP: ERROR packets are processed now.
Kernel: all components (LIST, RULEs, etc.) now write their tags that can be checked with the Submit Address Rule condition. See the Transfer section for the details.
Bug Fix: CALENDAR: the HTTP Delete operation (used to erase all calendar items) could crash the server.
Bug Fix: RULES: 4.1: Rule Comments could be lost if Rule names/priorities were modified.
Bug Fix: SIP: 4.2: parsing failed on address-specs with a comma sign in the comment field.
Bug Fix: SMTP: 3.0: AUTH-ed messages were not relayed if the Relay to Non-Client IPs setting was set to Nobody.
Bug Fix: SMTP: 4.2b8: malformed SPF records could cause infinite loops in macro processing.
Bug Fix: WebUser 4.2.4: not all stateless request processors supported the <REDIRECT> tags in responses.

4.2.7 28-Nov-04

Platforms: the OpenVMS/Alpha and OpenVMS/IA64 versions are released.
WebUser: the Chinese (Simplified) and Slovak dictionary files have been added.
Calendar: Data Import and HTTP Publishing operations now support CANCEL items. They can be used to remove existing items from the target Mailbox.
Lawful Intercept: the Mailbox option is supported now.
GROUP: messages distributed via Groups now get the X-Autogenerated: group header (so they are not considered Human-Generated).
MAPI: the version 1.1.10 of the MAPI Connector is included. Kerberos Authentication is supported now.
TFTP: excessive data bytes in ACK packets are ignored now.
External Tasks: non-waiting "kills" are employed to avoid problems with some Linux kernels.
WebUser: Directory Address Book now put RDNs into the attribute list to comply with LDAP standards.
WebUser: Directory Address Book search function now checks the cn, mail, and uid attributes.
SMTP: special processing of the port 587 (RFC2476) is implemented.
CLUSTER: SMTP module now checks remote peers IP addresses against the IP addresses assigned to local domains (to avoid loops via load balancer IPs).
Bug Fix: WebUser: 4.1: Directory Address Books with non-ASCII names did not work properly.
Bug Fix: Queue: 4.1: If a message was submitted immediately after server startup (most likely - via the PIPE module) it could be left unprocessed till the next server restart.
Bug Fix: Calendar: 4.1: when recurrent events were stored, the DTEND property was not stored in the local time format.

4.2.6 29-Oct-04

KERBEROS: "principal" comparison rules were relaxed (to support Active Directory KDC).
MAPI: the version 1.1.9 of the MAPI Connector is included. Kerberos Authentication is supported now.
SIGNAL: requests for Live Communications can be be sent to group objects.
GROUPS: the Disable Email and Disable Live Communication options are implemented.
LIST: if the Hide From addresses option is selected, the Reply-To addresses are removed from messages.
WebUser: the "style" tag parameters are removed when displaying HTML messages, as these parameters can contain scripts.
WebUser: the Portuguese language support has been added.
IMAP: the Content-Location data extension is added to the BODYSTRUCTURE output.
Foundation: the getpwnam_r buffer increased to avoid crashes in some versions of Linux system libraries.
Foundation: ISO-2022-JP encoding routines have been updated.
Bug Fix: TFTP: 4.2.4-4.2.5: files containing an even number of 512 data blocks were transferred incorrectly.
Bug Fix: CLUSTER: 4.2.3: creating the first Group/Forwarder in a freshly created Domain could crash the non-controller members.

4.2.5 10-Oct-04

RULES: now the [bcc] prefix is supported in the Redirect/Forward actions.
MAPI: the version 1.1.8 of the MAPI Connector is included. Multiple-language support is added to the client and server components. Now the localization file is always installed with the client component.
Bug Fix: LIST: 4.2: "report to owner" messages had malformed From: header fields.
Bug Fix: TFTP: 4.2.4: TFTP file reading was broken.
Bug Fix: SIP: 4.2.1: received and rport values were not added to Via headers.
Bug Fix: RULES: the Accept Event action incorrectly processed Non-Busy events (such as All-Day Events).

4.2.4 01-Oct-04

WebUser: the special WML and I-Mode Skins are supported now. WAP/WML and I-Mode/cHTML Parameters are added to WebUser Preferences. Basic default WML and IMode Skins are created. The WML portions are removed from the Basic Unnamed Skin. See the WebApp section of the manual for the details.
WebUser: the special <REDIRECT> tags are supported now. These tags can be used to return HTTP redirect responses. See the AppCodes section for more details.
CLI: the CREATEWEBUSERSESSION command got new optional parameters.
PWD: now APOP-type prompts are sent to Cluster members even if the APOP authentication is switched off.
Bug Fix: External AUTH: 4.2b4: the positions of the key and password SASL command parameters were swapped..
Bug Fix: WebUser: HTML encoding for Shift-JIS incorrectly processed half-width katakana.
Bug Fix: LIST: 4.2: the From: address of service messages was formed incorrectly (quote marks around the address strings).
Bug Fix: CLI: 4.1b: the CREATEWEBUSERSESSION command incorrectly processed the WML parameter.
Bug Fix: TFTP: 4.2b7: data blocks resent because of duplicated ACKs were corrupted.
Bug Fix: Utils: 2.0: the sendmail utility incorrectly checked error codes.
Bug Fix: CLUSTER: 4.2: sometimes the STORE command parameters were processed incorrectly.
Bug Fix: Foundation: 4.2: the new "date" data elements were parsed incorrectly.

4.2.3 22-Sep-04

WebUser: several fields have been added to the Certificate/Key export format, to support Windows 2000 Key import functions.
WebUser: the French dictionary file has been added.
DNR: now the resolver checks that results of MX search operations are not listed in the Dummy IP Addresses list.
CLUSTER: now Submit Address conditions work in Account-level Rules, too.
Bug Fix: HTTP: authorization routines incorrectly checked user access rights.
Bug Fix: WebUser: 4.2.2: Calendar menus were displayed incorrectly.

4.2.2 17-Sep-04

WebUser: all text strings are moved from the Basic Skin into its strings.data file, Basic and GoldenFleece Skins modified.
WebUser: multi-lingual Skins are supported now (the Language WebUser Preference), some language files are included into the Basic Skin.
WebUser: stateless requests now use the Skin specified in the Domain Default Account WebUser Preferences (rather than the Unnamed Skin).
WebUser: URLs with "anchors" (such as http://aaa.dom/xxx#anchor) are supported now.
MAPI: the version 1.1.7 of the MAPI Connector is included.
WebAdmin: The "Open Active Log showing last" setting is implemented (a new Log Manager setting).
SMTP: the Relay to Any IP Address and Accept Wakeup settings can be set to "nobody" now.
CLUSTER: SMTP: messages directed to non-cluster accounts are not submitted remotely, thus avoiding inter-cluster loops.
CLUSTER: reloading of shared domains during controller failover is handled by several threads now.
LOCAL: now Over-Quota notice messages are generated using 2 different Server Strings: one when an incoming message has been delivered, and the other one - when an incoming message is too big.
IMAP: now the untagged UIDNEXT response is returned for the SELECT and EXAMINE commands.
Bug Fix: CLUSTER FTP/CLI: 4.2b3: the PUTWEBFILE command used to create a directory could return the 599 error code.
Bug Fix: EXTAUTH: 4.2: the ROUTE answer could crash the server.
Bug Fix: Kernel: some internal routines processed Japanese and Korean charsets incorrectly.
Bug Fix: DOMAINS: 4.2b6: renaming a domain could case loss of its aliases.
Bug Fix: CLUSTER: 4.2b1: when Remote Queue processing was enabled, message temp files were not properly released.
Bug Fix: RULES: the Accept Rule action did not decode quoted-printable and base64-encoded MIME parts.

4.2.1 05-Sep-04

SIP: the SIP module has been completely redesigned. The SIGNAL module (proxy and server functions) is implemented.
SIGNAL: the Presence module has been implemented (used to exchange online status information with "buddies").
WebUser: the presence.wssp page/code module is implemented.
MAPI: the version 1.1.6 of the MAPI Connector is included.
Kerberos: Triple-DES methods are supported now.
WSSP: now the JavaScript prefix encodes data into Unicode and outputs Unicode symbols using the \u prefix.
WebSite: the "is directory" flag is now checked before attempting to read a file.
Foundation: "gethostbyname" OS calls have been removed on most platforms (were used only to get the server computer own name).
Directory: Remote Units close connections to remote servers if an error occurs.
Directory: WebAdmin LDIF/LMOD import routines have been redesigned.
Directory: WebAdmin Delete Record operation has been implemented.
Calendar: incorrectly formatted VTIMEZONE elements created by Apple's iCal are accepted now.
Local: delivery to "direct" Mailboxes has been optimized.
Security: the External Authenticator Protocol Version 5 is implemented: the Router-type prefixes for the NEW command, the [NORELAY] tag for the ROUTED response.
Directory: LDIF/LMOD import of base64-encoded data is implemented.
SMTP: now explicitly specified White Hole addresses are not temp-blacklisted.
SMTP: the header field added for blacklisted addresses can contain macro-symbols now.
Bug Fix: SIP: 4.2b4: SRV DNS records could not be processed.
Bug Fix: FreeBusy: 4.2: changes in the date-time scanning routines caused "illegal format" errors.
Bug Fix: WebUser: 4.1b: the X-Priority header field values were generated incorrectly.
Bug Fix: WebAdmin: 4.2b2: Subscriber management routine did not use the current Administrator preferences.
Bug Fix: Foundation: 2.8: A "BigNumber library" negative number processing error could cause self-check exceptions.
Bug Fix: Migration: 3.0: the MoveIMAPMail utility could crash on 64-bit platforms.

4.2 28-Jul-04

SMTP: SPF processing has been improved.
SIP: CANCEL transaction processing has been improved.
LDAP: the status of the "criticality" control extension flag is changed to "optional".
VCARD: now the date-time parser accepts separator symbols.
LOCAL: the algorithm for "Over Quote" notice message generation has been changed.
RULES: the Accept operation now understands meeting requests [mis]formatted with Apple's iCal application.
Bug Fix: RPOP: 4.2b1: NTLM/MSN login (for msn.com) did not work with "short" challenges received from an MSN POP server.
Bug Fix: PWD: 4.2b5: cluster "proxied" connections did not work.
Bug Fix: HTTP: 3.5: "dirty" SNMP counters could be added to http* statistical elements if an SSL/TLS connection could not be established.
Bug Fix: WSSP: 4.2b2: the JAVASCRIPT tag did not work correctly.
Bug Fix: LDAP: 3.5: the STARTTLS extended request was not processed correctly.

4.2b8 13-Jul-04

Platforms: Linux/Itanium version is re-released (using modern hardware and libraries).
FTP: "data channel" close optimization (introduced in 4.2b6) removed as a workaround for MacOS Fetch client bug.
FTP: the AUTH SSL and AUTH TLS-P commands are supported now.
SMTP: SPF processing enhanced (macro processing, redirect, Received-SPF header field).
Directory: RFC2253 (DN syntax rules) is implemented.
Calendar: iCalendar EXDATE fields are supported.
Bug Fix: WebUser: 4.2b2: when sending a letter with more than one attachment, the attachment names were corrupted.
Bug Fix: WebUser: 4.1: the TakeAddress operation could cause "soft deadlock".
Bug Fix: WebAdmin: 4.2b1: size-type parameters in Mailing List settings did not accept the "M" and "K" suffixes.
Bug Fix: RADIUS: 4.2b4: the Accounting Log file was created incorrectly.

4.2b7 07-Jul-04

Platforms: FreeBSD 5.x/Intel version is released.
TFTP: the TFTP module has been implemented.
HTTP: when closing a Keep-Alive connection on time-out, the TLS "quit" packet is not sent (a workaround for MS IExplorer SSL/TLS bug).
HTTP: validity checks added to /redirect/ and /sredirect/ realm processing.
Router: the Mail:,Access:, and Live: record prefixes are supported now.
WebUser: named Stock Skins are supported now. The "Golden Fleece" Stock Skin is included into the distribution.
WebUser: the Private Item Event/Task switch is implemented.
WebUser: the Reply All operation removes duplicate and "self" addresses from To and Cc fields.
WSSP: the EQUALSNOCASE operation is implemented.
MAPI: submitted messages are marked as "authenticated" if the Return-Path is routed to the E-mail address of the current user.
IMAP: multi-APPEND now uses only one temp file for all received messages.
TLS: extended support for duplex operations.
Domains: new group member addresses in Directory-based Domains are stored as "groupMember" attributes.
Domains: "empty" records for Directory-based Domains got their own objectClasses that include their RDN attributes.
SNMP: the imapMAPIActive element is implemented.
Bug Fix: WebUser: 4.2b2: the Password Recovery page did not work.
Bug Fix: SIP: 4.2b2: attempts to connect to the TLS port could crash the server.

4.2b6 19-Jun-04

Mailbox: the TextMailbox Manager implements Mailbox indexing.
Calendar: now the recurrent events are stored together with their Time Zone information, and they are interpreted "within" that Time Zone.
MAPI: now the Refresh button on the Settings->General page reloads the server-side MAPI DLL.
Rules: Domain Rule processing has been changed: all Domain Rules with priorities >5 are executed before Account Rules, with priorities <= 5 are executed after Account Rules.
WebAdmin: When the current Log file page is opened, the initial "From" time is set to the current time minus 2 minutes.
WebAdmin: the SMTP settings page has been redesigned (divided into 3 pages).
SMTP: the SPF Verification functionality has been added.
Kerberos: added a workaround for Apple's Mail.app bug (excessive bytes at the end of Kerberos tokens).
WebFiles: now it is possible to read and write files in chunks.
CLI: the GETWEBFILE and PUTWEBFILE commands have new parameters now.
FTP: GSSAPI MIC,ENC,CCC commands are supported now.
FTP: GSSAPI-based security for control and data channels has been implemented.
FTP: now files are uploaded and downloaded in chunks, thus allowing large (100MB+) file handling in both single-server and Cluster environments.
Lawful Intercept: changes in the Settings now take effect on the currently opened accounts, too.
DOMAINS: alias processing has been redesigned to support large number (100,000+) of aliases efficiently.
LDAP, Directory: all DN size limits have been increased to 1024 bytes.
Bug Fix: WebAdmin: 4.2b3: numbers of List Subscriber bounces were displayed incorrectly.
Bug Fix: WebUser: 4.2b4: the notAltText flag was not set correctly.
Bug Fix: Utils: 4.2b4: the -f flag could crash the sendmail utility.
Bug Fix: HTTPUser: 4.1: the /CalendarData/ login realm was specified incorrectly.
Bug Fix: Calendar: 4.1: concurrent modifications of the same Calendar object could cause "soft deadlock".
Bug Fix: Kernel: 4.2b5: zero-timeout reading operation could interrupt SSL/TLS channels on cluster frontends.
Bug Fix: FTP: 4.2b4: "unbinding" data sockets broke "active connections" through firewalls.
Bug Fix: CLI: web site access security problem has been fixed.

4.2b5 04-Jun-04

SIP: Packet Dispatcher modified to avoid deadlocks under heavy loads.
SMTP: when the Prompt Delay setting is set to non-zero, the Server checks for any data received from the sender before the prompt is displayed. It drops the connection if it sees "pre-prompt data".
WebUser: "flowed" text formatting has been improved (locates non-original lines and removes trailing spaces from them).
Domains: object management has been changed to avoid problems with concurrent domain deletion and domain access operations.
Platform: on MacOSX/Darwin the default PWD port is set to 8106 instead of 106 to avoid conflicts with Apple's own "Password Server".
HTTP: the "Personal WebSite Prefix" became a Domain Setting now. The "~" prefix now always works (in addition to the specified Prefix).
HTTP: the "Default WebPage" became an Account Setting now.
HTTP: if a URL w/o a trailing slash refers to a Personal Web Site subdirectory, the "redirect" HTTP response is generated.
Bug Fix: CLUSTER: 4.2b4: messages with empty return-paths could not be delivered to backends.
Bug Fix: CLUSTER: 4.2b4: POP3 sessions to backend accounts could show INBOXes as empty.
Bug Fix: External Filters: 4.2b4: the new External processor did not process the "INTF" responses.
Bug Fix: FTP: 3.5: "resuming" FTP uploads could crash the server.

4.2b4 31-May-04

Security: the Kerberos Authentication method (RFC1510) has been implemented. The Security->Kerberos page has been added to the Domain Settings, the Kerberos: Allow to Use option has been added to Account Settings, the Advertise GSSAPI option has been added to the Obscure settings.
Security: the GSSAPI SASL method is implemented.
RADIUS: External Helper support is implemented (to check request attributes and to produce response attributes).
RADIUS: Accounting Log is implemented.
SIP: minor changes and workarounds for broken SIP clients.
External AUTH: the protocol version 4 is implemented (quoted strings for passwords and keys).
Mailbox: the concept of "hidden" messages is implemented; "hidden" messages can be seen only by those who have the Admin access right for the Mailbox.
IMAP: support for $Hidden flag is implemented.
CLUSTER: pre-locking is implemented to avoid problems with accounts being accessed by non-controller backends immediately before or after they are being created.
Admin: now the IP Address List settings can contain "exclude addresses" lines.
WebAdmin: the Test Address button has been added to the Client IPs and Blacklisted IPs pages.
MAPI: the version 1.1.3 of the MAPI Connector is included.
Kernel: Japanese EUC-JP and Shift-JIS character sets are supported now.
SMTP: the @12.34.56.78: queue prefixes are not added to host names included into Hold Mail lists (to support ATRN retrieval for those hosts).
Bug Fix: CLUSTER: 4.2b1: the Local Delivery module incorrectly processed optional message tags.
Bug Fix: LIST: 4.2b1: quoted-printable header/trailer encoding procedure did not work correctly.
Bug Fix: WebUser: 4.2b3: strings.data dictionary did not get the case-insensitive flag.
Bug Fix: Utilities: 4.2b3: the 'sendmail' program did not process multi-line header fields.
Bug Fix: Kernel: 4.1: the TimeZone GMT->local conversion routine did not process daylight saving times.
Bug Fix: FTP: 4.0: the server tried to bind outgoing connections to a fixed port, thus creating problems for multiple "active" file transfers.

4.2b3 06-May-04

SIP: Windows Messenger support logic has been changed to support intermediate proxies.
SMTP: the alternative Keep Trying setting for messages with empty Return-Paths is implemented.
SMTP: the Delay Prompt option is implemented.
QUEUE: file opening algorithm has been changed to allow parallel file opening/closing.
DOMAINS: Domain Foldering is implemented (can be specified on the Domain Defaults page).
CLI: the GETDOMAINLOCATION command is implemented.
LOCAL, Account: the Account Quota options have been moved from the Local Module settings into Account Settings and Server Strings.
LOCAL, Account: the Over Quota Notice message functionality has been implemented.
LDAP: RFC2891 (sorting) is implemented.
LDAP: RFC2696 (paging) is implemented.
WebUser: now XML tags are removed from the displayed HTML code to stop the XML-based scripting tricks.
WebUser: now the strings.data file is cached only when it is needed.
WebUser: FreeBusy file processing has been changed (Outlook 2003 is supported now).
Platform: the Windows installer adds the "tcpip" dependency into the "Service" record it creates.
Utilities: several minor changes in the sendmail utility.
CLUSTER: inter-cluster communications have changed to support larger file uploads.
CLUSTER: initial Domain loading (non-controller): domain renaming/deletion is supported now.
Foundation: additional error checks added to handle "disk full" errors.
Bug Fix: WebAdmin: 3.5: custom Domain Admin Preferences.html pages were ignored.
Bug Fix: WebAdmin: 4.1: the UTF-8 "BOM" symbols were removed on upload syntax check only, and were not removed from the stored files.
Bug Fix: Skins: 3.5: rapid and concurrent update operation of the same strings.data file could crash the server.
Bug Fix: CLI: 3.5: the ClearDomainSkinCache/ClearServerSkinCache/ClearClusterSkinCache commands could crash the server.
Bug Fix: LIST: 4.2b2: the Subscribers WebAdmin page did not correctly display the number of bounces.
Bug Fix: WebUser: 4.0: the Mailbox Rename function could crash the server.

4.2b2 09-Apr-04

Account: the SIP access mode setting is implemented.
SMTP: a 2-seconds delay is introduced before sending any error-type response to a non-client sender.
LOCAL: delivery of an account queue is now finished after 2 minutes, causing queue rescheduling, to avoid delivery thread usurpation by an account with a huge queue.
IMAP: processing of the STATUS command has been changed to allow for custom STATUS flags (used in MAPI).
WebUser: the DeleteAll operation is implemented on the mailbox.wssp page (not included into the Stock Skin), and on the mailboxsettings.wssp page.
WebUser: the "disabled" option for the ShowHTML setting is supported now.
WebUser: Show Images setting is implemented. It controls how the objects (images, etc.) with external references are processed.
WebUser: the Apply to Sub-Folders option is implemented (mailboxsettings.wssp).
WebUser: the Priority field can be added to regular (non-event) composed messages.
WebSite: support for non-ASCII file and folder names is implemented (websitebody.wssp modified).
WebAdmin: the Charset admin preference is supported on the Monitors pages now.
WSSP: the JAVASCRIPT prefix is implemented.
RULES: the Existing Mailbox condition is implemented.
ROUTER: now if object is a forwarder to user@domain, mailbox#object addresses are routed to mailbox#user@domain addresses.
DOMAINS: now Directory-based domains process forwarders and aliases locally, even if they have been created on a different "host" server (in a distributed domain or a Static Cluster).
SIP: TCP proxing for "msdata" streams is implemented, providing NAT/Firewall support for the "Share Application", "Remote Assistance", and other TCP-based features of Windows Messenger.
RADIUS: EAP-MD5 (RFC1994, RFC2284, RFC2869) is implemented.
POP, IMAP, ACAP: after several login errors a delay is introduced into all responses, not only into the 'failed authentication' ones.
DEQUEUER: the Send Return-Receipts To setting is implemented.
LIST: message subjects are now MIME-decoded before being used for confirmation and digest subject checks.
LIST: now Subject Prefix strings can contain special symbol combinations (^N, etc.).
LIST: a Domain Administrator can modify List settings and subscriptions only if the CanAccessLists right is granted.
LIST: the WebAdmin interface is redesigned to support Cluster-safe calls and the CanAccessList Domain Access Right.
CLI: the PROCESSBOUNCE command is implemented.
IMAP: the REPLACEACL command is implemented.
SMTP: when a Return-Path address routes to a local Group or Mailing List, the Force AUTH option is applied, too.
PIPE: submitted messages now get the "client/trusted" flag (instead of the "authenticated" flag they got before).
Directory: Remote Units: the maximum acceptable DN size has been increased from 256 to 1024 bytes.
Bug Fix: WebUser: 4.2b1: the Calendar realm could not be used because of mis-formed AUTH headers.
Bug Fix: WebUser: 4.2b1: Calendar items were not recognized as "own" items.
Bug Fix: WebSite: 4.2b1: account creation failed if the Account Template contained an Initial Home Web Page.
Bug Fix: SIP: 4.2b1: parser incorrectly processed old-style "addr-specs" lexems.
Bug Fix: IMAP: 2.0: the LISTRIGHTS response did not include the "required rights" element.

4.2b1 23-Mar-04

SIP: SIP server/proxy is implemented (including NAT support and media proxy).
SIP: support for non-standard protocol used in Windows Messenger 5.0 is implemented.
Platform: the NetBSD/Intel version is released (NetBSD 2.0 is required).
Protection: The LAN IPs settings have been implemented. The "Process LAN IP Addresses as Clients" setting has been implemented.
CLI: The GETLANIPS,SETLANIPS,GETCLUSTERLANIPS,SETCLUSTERLANIPS commands have been implemented.
Directory: the RFC2798 implemented (all additional inetOrgPerson attributes have been added to the built-in Local Unit schema).
Queue: the queue directory "foldering" is implemented (see the Transfer section of the manual for the details).
Queue: the limit on number of queued messages is implemented.
WebAdmin: now the "date created" information is displayed on the Account Settings page.
WebAdmin: several account aliases can be specified in one field (separated with comma signs).
MAPI: MAPI connector 1.0.84 is included.
WebUser: the References header field is supported now.
WebUser: the TimeZone setting is implemented.
WebUser: the QP and Base64-encoded calendar MIME parts are displayed now.
WebUser: Directory-type Address Books now support the "Take Certificate" action.
WebUser: Apple vCards (Unicode-formatted) are supported now.
WebUser: now S/MIME certificates can be generated by users themselves.
WebUser: the Password Recovery message does not contain the name of the account any more.
CALENDAR: Task Reply messages now contain copies of the Task Description field.
CLUSTER: Domains loading during a non-controller member startup has been improved.
CLUSTER: Remote Queue processing has been implemented.
Directory-Based Domains: the Template updating mechanism has been improved.
Kernel: the ISO-8859-13,ISO-8859-14,ISO-8859-16 charsets are supported now.
Kernel: the Windows extensions are added to the ISO-8859-x charsets.
Kernel: charset processing has been modified: charset aliases are supported now.
SNMP: the max size of generated responses is increased to 1400 bytes.
IMAP: the SETQUOTA command is fully implemented.
LIST: the feed trailer-footers are QP-encoded when they are inserted into a quoted-printable-encoded text.
Rules: now the Mark action can be used in the Server-Wide and Cluster-Wide Rules.
Foundation: the "object checking routines" do not slow down the system any more, the --NoObjReleaseCheck flag has been phased out.
SMTP: Sender Disconnect after errors option now works for non-Client senders only.
SMTP: the Recipients per time period Limit is implemented.
SMTP: sending to a domain is rejected immediately if all domain MX records cannot be resolved because of non-timeout problems.
Security: the DIGEST and NTLM authentication methods added to the HTTP modules.
Security: the Advertise APOP method option is implemented (see the Security section of the manual).
HTTP: if a CGI output starts with "HTTP/", no HTTP header data is added by the Server.
HTTP: if a CGI output starts with the "Status:" field, that field it used to form the response code and response text.
Bug Fix: WebUser: 4.1b: message with empty body and no attachment were sent w/o the Content-Type field and the header separator line.
Bug Fix: WebUser: the Notes Mailboxes were given the IPF.stickyNote class instead of IPF.StickyNote, causing problem for MS Outlook.
Bug Fix: CLI: a malformed WebFile command could crash the server.
Bug Fix: CLI: the GETTEMPCLIENTIPS command could return garbage after the data.
Bug Fix: WebUser: non-ASCII attachment names were encoded incorrectly if the selected charset was not UTF-8.
Bug Fix: CLUSTER: the controller incorrectly checked if an account was in use on other backends when a rename/remove operation was requested.
Bug Fix: Directory-Based Domains: if an account was auto-created (by means of adding a directory record) and the domain Template contained an Initial Message, the server could crash.

Summary

Platform

the NetBSD/Intel version is released.
the OpenVMS/Alpha and OpenVMS/IA64 versions are released.
Linux/Itanium version is re-released (using modern hardware and libraries).
FreeBSD 5.x/Intel version is released.
on MacOSX/Darwin the default PWD port is set to 8106 instead of 106 to avoid conflicts with Apple's own "Password Server".
the Windows installer adds the "tcpip" dependency into the "Service" record it creates.
External Tasks: non-waiting "kills" are employed to avoid problems with some Linux kernels.

Foundation

the getpwnam_r buffer increased to avoid crashes in some versions of Linux system libraries.
ISO-2022-JP encoding routines have been updated.
"gethostbyname" OS calls have been removed on most platforms (were used only to get the server computer own name).
additional error checks added to handle "disk full" errors.
the "object checking routines" do not slow down the system any more, the --NoObjReleaseCheck flag has been phased out.

Kernel

all components (LIST, RULEs, etc.) now write their tags that can be checked with the Submit Address Rule condition. See the Transfer section for the details.
Japanese EUC-JP and Shift-JIS character sets are supported now.
the ISO-8859-13,ISO-8859-14,ISO-8859-16 charsets are supported now.
the Windows extensions are added to the ISO-8859-x charsets.
charset processing has been modified: charset aliases are supported now.
now the IP Address List settings can contain "exclude addresses" lines.
now the date-time parser accepts separator symbols.

ROUTER

the Mail:,Access:, and Live: record prefixes are supported now.
now if object is a forwarder to user@domain, mailbox#object addresses are routed to mailbox#user@domain addresses.

QUEUE

file opening algorithm has been changed to allow parallel file opening/closing.
the Queue directory "foldering" is implemented (see the Transfer section of the manual for the details).
the limit on number of queued messages is implemented.
the Send Return-Receipts To setting is implemented.

Rules

recurrent Events can be auto-accepted now.
now the [bcc] prefix is supported in the Redirect/Forward actions.
the Accept operation now understands meeting requests [mis]formatted with Apple's iCal application.
Domain Rule processing has been changed: all Domain Rules with priorities >5 are executed before Account Rules, with priorities <= 5 are executed after Account Rules.
the Existing Mailbox condition is implemented.
now the Mark action can be used in the Server-Wide and Cluster-Wide Rules.

Domains

new group member addresses in Directory-based Domains are stored as "groupMember" attributes.
"empty" records for Directory-based Domains got their own objectClasses that include their RDN attributes.
alias processing has been redesigned to support large number (100,000+) of aliases efficiently.
object management has been changed to avoid problems with concurrent domain deletion and domain access operations.
Domain Foldering is implemented (can be specified on the Domain Defaults page).
now Directory-based domains process forwarders and aliases locally, even if they have been created on a different "host" server (in a distributed domain or a Static Cluster).

Accounts

the SIP access mode setting is implemented.
the Account Quota options have been moved from the Local Module settings into Account Settings and Server Strings.
the Over Quota Notice message functionality has been implemented.

Groups

messages distributed via Groups now get the X-Autogenerated: group header (so they are not considered Human-Generated).
the Disable Email and Disable Live Communication options are implemented.

Mailboxes

the concept of "hidden" messages is implemented; "hidden" messages can be seen only by those who have the Admin access right for the Mailbox.
the TextMailbox Manager implements Mailbox indexing.

WebSite

now it is possible to read and write files in chunks.
support for non-ASCII file and folder names is implemented (websitebody.wssp modified).
the "is directory" flag is now checked before attempting to read a file.

Calendar

Task Reply messages now contain copies of the Task Description field.
Recurrent event conflicts are detected now.
Data Import and HTTP Publishing operations now support CANCEL items. They can be used to remove existing items from the target Mailbox.
incorrectly formatted VTIMEZONE elements created by Apple's iCal are accepted now.
iCalendar EXDATE fields are supported.
now the recurrent events are stored together with their Time Zone information, and they are interpreted "within" that Time Zone.
when Free/Busy info is built, the time zones associated with the Events are used instead of the default Server zone.

Protection

POP, IMAP, ACAP: after several login errors a delay is introduced into all responses, not only into the 'failed authentication' ones.
The LAN IPs settings have been implemented. The "Process LAN IP Addresses as Clients" setting has been implemented.

Security

the External Authenticator Protocol Version 5 is implemented: the Router-type prefixes for the NEW command, the [NORELAY] tag for the ROUTED response.
the Kerberos Authentication method (RFC1510) has been implemented. The Security->Kerberos page has been added to the Domain Settings, the Kerberos: Allow to Use option has been added to Account Settings, the Advertise GSSAPI option has been added to the Obscure settings.
the GSSAPI SASL method is implemented.
the DIGEST and NTLM authentication methods added to the HTTP modules.
the Advertise APOP method option is implemented (see the Security section of the manual).

Kerberos

"principal" comparison rules were relaxed (to support Active Directory KDC).
Triple-DES methods are supported now.
added a workaround for Apple's Mail.app bug (excessive bytes at the end of Kerberos tokens).

TLS

extended support for duplex operations.

Lawful Intercept

the Mailbox option is supported now.
changes in the Settings now take effect on the currently opened accounts, too.

WebAdmin

the "Open Active Log showing last" setting is implemented (a new Log Manager setting).
when the current Log file page is opened, the initial "From" time is set to the current time minus 2 minutes.
the SMTP settings page has been redesigned (divided into 3 pages).
the Test Address button has been added to the Client IPs and Blacklisted IPs pages.
the Charset admin preference is supported on the Monitors pages now.
now the "date created" information is displayed on the Account Settings page.
several account aliases can be specified in one field (separated with comma signs).
Directory-Based Domains: the Template updating mechanism has been improved.

CLI

the CREATEWEBUSERSESSION command got new optional parameters.
the GETWEBFILE and PUTWEBFILE commands have new parameters now.
the GETDOMAINLOCATION command is implemented.
The GETLANIPS,SETLANIPS,GETCLUSTERLANIPS,SETCLUSTERLANIPS commands have been implemented.
the PROCESSBOUNCE command is implemented.

Directory

Remote Units close connections to remote servers if an error occurs.
WebAdmin LDIF/LMOD import routines have been redesigned.
WebAdmin Delete Record operation has been implemented.
LDIF/LMOD import of base64-encoded data is implemented.
RFC2253 (DN syntax rules) is implemented.
all DN size limits have been increased to 1024 bytes.
Remote Units: the maximum acceptable DN size has been increased from 256 to 1024 bytes.
the RFC2798 implemented (all additional inetOrgPerson attributes have been added to the built-in Local Unit schema).

LDAP

now LDAP Provisioning allows a client to retrieve effective settings directly from the Account Manager.
the status of the "criticality" control extension flag is changed to "optional".
RFC2891 (sorting) is implemented.
RFC2696 (paging) is implemented.
all DN size limits have been increased to 1024 bytes.

HTTP

when closing a Keep-Alive connection on time-out, the TLS "quit" packet is not sent (a workaround for MS IExplorer SSL/TLS bug).
validity checks added to /redirect/ and /sredirect/ realm processing.
the "Personal WebSite Prefix" became a Domain Setting now. The "~" prefix now always works (in addition to the specified Prefix).
the "Default WebPage" became an Account Setting now.
if a URL w/o a trailing slash refers to a Personal File Site subdirectory, the "redirect" HTTP response is generated.
if a CGI output starts with "HTTP/", no HTTP header data is added by the Server.
if a CGI output starts with the "Status:" field, that field it used to form the response code and response text.

FTP

"data channel" close optimization (introduced in 4.2b6) removed as a workaround for MacOS Fetch client bug.
the AUTH SSL and AUTH TLS-P commands are supported now.
GSSAPI MIC,ENC,CCC commands are supported now.
GSSAPI-based security for control and data channels has been implemented.
now files are uploaded and downloaded in chunks, thus allowing large (100MB+) file handling in both single-server and Cluster environments.

TFTP

ERROR packets are processed now.
excessive data bytes in ACK packets are ignored now.
the TFTP module has been implemented.

MAPI

the version 1.1.12 of the MAPI Connector is included.
WebUser Interface settings integration is implemented.
Kerberos Authentication is supported now.
Multiple-language support is added to the client and server components. Now the localization file is always installed with the client component.
submitted messages are marked as "authenticated" if the Return-Path is routed to the E-mail address of the current user.
now the Refresh button on the Settings->General page reloads the server-side MAPI DLL.

WebUser

Recurrent event display method changed, the calendarpart.wssp file updated.
the Arabic dictionary file has been added. The RTL/LTR tags added to all Stock Skin pages to support Right-to-Left scripts and languages, the "ralign" elements added to the Mailboxes.wssp page.
the German and Dutch dictionary files have been added.
information about event conflicts is displayed (using the statusCode, conflictingID variables).
the Chinese (Simplified) and Slovak dictionary files have been added.
Directory Address Book now put RDNs into the attribute list to comply with LDAP standards.
Directory Address Book search function now checks the cn, mail, and uid attributes.
the "style" tag parameters are removed when displaying HTML messages, as these parameters can contain scripts.
the Portuguese language support has been added.
the special WML and I-Mode Skins are supported now. WAP/WML and I-Mode/cHTML Parameters are added to WebUser Preferences. Basic default WML and IMode Skins are created. The WML portions are removed from the Basic Unnamed Skin. See the WebApp section of the manual for the details.
the special <REDIRECT> tags are supported now. These tags can be used to return HTTP redirect responses. See the AppCodes section for more details.
several fields have been added to the Certificate/Key export format, to support Windows 2000 Key import functions.
the French dictionary file has been added.
all text strings are moved from the Basic Skin into its strings.data file, Basic and GoldenFleece Skins modified.
multi-lingual Skins are supported now (the Language WebUser Preference), some language files are included into the Basic Skin.
stateless requests now use the Skin specified in the Domain Default Account WebUser Preferences (rather than the Unnamed Skin).
URLs with "anchors" (such as http://aaa.dom/xxx#anchor) are supported now.
named Stock Skins are supported now. The "Golden Fleece" Stock Skin is included into the distribution.
the Private Item Event/Task switch is implemented.
the Reply All operation removes duplicate and "self" addresses from To and Cc fields.
"flowed" text formatting has been improved (locates non-original lines and removes trailing spaces from them).
now XML tags are removed from the displayed HTML code to stop the XML-based scripting tricks.
now the strings.data file is cached only when it is needed.
FreeBusy file processing has been changed (Outlook 2003 is supported now).
the DeleteAll operation is implemented on the mailbox.wssp page (not included into the Stock Skin), and on the mailboxsettings.wssp page.
the "disabled" option for the ShowHTML setting is supported now.
Show Images setting is implemented. It controls how the objects (images, etc.) with external references are processed.
the Apply to Sub-Folders option is implemented (mailboxsettings.wssp).
the Priority field can be added to regular (non-event) composed messages.
the References header field is supported now.
the TimeZone setting is implemented.
the QP and Base64-encoded calendar MIME parts are displayed now.
Directory-type Address Books now support the "Take Certificate" action.
Apple vCards (Unicode-formatted) are supported now.
now S/MIME certificates can be generated by users themselves.
the Password Recovery message does not contain the name of the account any more.

WSSP

the EQUALSNOCASE operation is implemented.
the JAVASCRIPT prefix is implemented.

SIP

External Gateway support has been added.
Media Proxies now support re-INVITE requests.
Media Proxy Loops are detected and eliminated.
TCP proxing for "msdata" streams is implemented, providing NAT/Firewall support for the "Share Application", "Remote Assistance", and other TCP-based features of Windows Messenger.
SIP server/proxy is implemented (including NAT support and media proxy).
support for non-standard protocol used in Windows Messenger 5.0 is implemented.

CLUSTER

the outgoing SMTP channels now use the Cluster name in the HELO/EHLO commands.
SMTP module now checks remote peers IP addresses against the IP addresses assigned to local domains (to avoid loops via load balancer IPs).
now Submit Address conditions work in Account-level Rules, too.
SMTP: messages directed to non-cluster accounts are not submitted remotely, thus avoiding inter-cluster loops.
reloading of shared domains during controller failover is handled by several threads now.
pre-locking is implemented to avoid problems with accounts being accessed by non-controller backends immediately before or after they are being created.
inter-cluster communications have changed to support larger file uploads.
initial Domain loading (non-controller): domain renaming/deletion is supported now.
Domains loading during a non-controller member startup has been improved.
Remote Queue processing has been implemented.

SNMP

the imapMAPIActive element is implemented.

LIST

if the Hide From addresses option is selected, the Reply-To addresses are removed from messages.
message subjects are now MIME-decoded before being used for confirmation and digest subject checks.
now Subject Prefix strings can contain special symbol combinations (^N, etc.).
a Domain Administrator can modify List settings and subscriptions only if the CanAccessLists right is granted.
the WebAdmin interface is redesigned to support Cluster-safe calls and the CanAccessList Domain Access Right.
the feed trailer-footers are QP-encoded when they are inserted into a quoted-printable-encoded text.

IMAP

the Content-Location data extension is added to the BODYSTRUCTURE output.
now the untagged UIDNEXT response is returned for the SELECT and EXAMINE commands.
multi-APPEND now uses only one temp file for all received messages.
support for $Hidden flag is implemented.
processing of the STATUS command has been changed to allow for custom STATUS flags (used in MAPI).
the REPLACEACL command is implemented.
the SETQUOTA command is fully implemented.

SMTP

The Original Return-Path domain is used for DNS verifications when the Forwarded To option is enabled.
the Blocked Addresses to Remember option has been implemented.
now warning messages are sent when individual recipients are delayed.
special processing of the port 587 (RFC2476) is implemented.
the Relay to Any IP Address and Accept Wakeup settings can be set to "nobody" now.
now explicitly specified White Hole addresses are not temp-blacklisted.
the header field added for blacklisted addresses can contain macro-symbols now.
the SPF Verification functionality has been added.
the @12.34.56.78: queue prefixes are not added to host names included into Hold Mail lists (to support ATRN retrieval for those hosts).
the alternative Keep Trying setting for messages with empty Return-Paths is implemented.
the Delay Prompt option is implemented.
a 2-seconds delay is introduced before sending any error-type response to a non-client sender.
when a Return-Path address routes to a local Group or Mailing List, the Force AUTH option is applied, too.
Sender Disconnect after errors option now works for non-Client senders only.
the Recipients per time period Limit is implemented.
sending to a domain is rejected immediately if all domain MX records cannot be resolved because of non-timeout problems.

LOCAL

now Over-Quota notice messages are generated using 2 different Server Strings: one when an incoming message has been delivered, and the other one - when an incoming message is too big.
delivery to "direct" Mailboxes has been optimized.
the algorithm for "Over Quote" notice message generation has been changed.
delivery of an account queue is now finished after 2 minutes, causing queue rescheduling, to avoid delivery thread usurpation by an account with a huge queue.

RADIUS

External Helper support is implemented (to check request attributes and to produce response attributes).
Accounting Log is implemented.
EAP-MD5 (RFC1994, RFC2284, RFC2869) is implemented.

PIPE

PIPE: submitted messages now get the "client/trusted" flag (instead of the "authenticated" flag they got before).

PWD

PWD: now APOP-type prompts are sent to Cluster members even if the APOP authentication is switched off.

DNR

DNR: now the resolver checks that results of MX search operations are not listed in the Dummy IP Addresses list.

Utilities

Utilities: several minor changes in the sendmail utility.

Bug Fixes

Bug Fix: Foundation: 2.8: A "BigNumber library" negative number processing error could cause self-check exceptions.
Bug Fix: Kernel: 3.5: some internal routines processed Japanese and Korean charsets incorrectly.
Bug Fix: Kernel: 4.1: the TimeZone GMT->local conversion routine did not process daylight saving times.
Bug Fix: Calendar: 4.1: concurrent modifications of the same Calendar object could cause "soft deadlock".
Bug Fix: Calendar: 4.1: when recurrent events were stored, the DTEND property was not stored in the local time format.
Bug Fix: Calendar: RRULE parsing could stop on the UNTIL parameter.
Bug Fix: Calendar: the HTTP Delete operation (used to erase all calendar items) could crash the server.
Bug Fix: CLUSTER: the controller incorrectly checked if an account was in use on other backends when a rename/remove operation was requested.
Bug Fix: GROUPS: 3.2: the Remove Author from Distribution option could not be disabled in Directory-based Domains.
Bug Fix: Queue: 4.1: If a message was submitted immediately after server startup (most likely - via the PIPE module) it could be left unprocessed till the next server restart.
Bug Fix: RULES: 4.1: Rule Comments could be lost if Rule names/priorities were modified.
Bug Fix: RULES: 4.1: the Accept Event action incorrectly processed Non-Busy events (such as All-Day Events).
Bug Fix: RULES: 4.1: the Accept Event action did not decode quoted-printable and base64-encoded MIME parts.
Bug Fix: WebAdmin: 3.5: custom Domain Admin Preferences.html pages were ignored.
Bug Fix: WebAdmin: 4.1: the UTF-8 "BOM" symbols were removed on upload syntax check only, and were not removed from the stored files.
Bug Fix: CLI: 4.1b: the CREATEWEBUSERSESSION command incorrectly processed the WML parameter.
Bug Fix: CLI: 3.5: a malformed WebFile command could crash the server.
Bug Fix: CLI: 4.1: the GETTEMPCLIENTIPS command could return garbage after the data.
Bug Fix: CLI: 4.1: web site access security problem has been fixed.
Bug Fix: CLI: 3.5: the ClearDomainSkinCache/ClearServerSkinCache/ClearClusterSkinCache commands could crash the server.
Bug Fix: LDAP: 3.5: the STARTTLS extended request was not processed correctly.
Bug Fix: LDAP: 4.0: response to a final DIGEST-MD5 SASL challenge was processed incorrectly.
Bug Fix: Skins: 3.5: rapid and concurrent update operation of the same strings.data file could crash the server.
Bug Fix: WebUser: 4.1: HTML encoding for Shift-JIS incorrectly processed half-width katakana.
Bug Fix: WebUser: 4.1b: the X-Priority header field values were generated incorrectly.
Bug Fix: WebUser: 4.1: the TakeAddress operation could cause "soft deadlock".
Bug Fix: WebUser: 4.0: the Mailbox Rename function could crash the server.
Bug Fix: WebUser: 4.1: Directory Address Books with non-ASCII names did not work properly.
Bug Fix: WebUser: 4.1b: message with empty body and no attachment were sent w/o the Content-Type field and the header separator line.
Bug Fix: WebUser: 4.1: the Notes Mailboxes were given the IPF.stickyNote class instead of IPF.StickyNote, causing problem for MS Outlook.
Bug Fix: WebUser: non-ASCII attachment names were encoded incorrectly if the selected charset was not UTF-8.
Bug Fix: HTTP: 3.5: "dirty" SNMP counters could be added to http* statistical elements if an SSL/TLS connection could not be established.
Bug Fix: HTTP: 4.1: the /CalendarData/ login realm was specified incorrectly.
Bug Fix: FTP: 3.5: "resuming" FTP uploads could crash the server.
Bug Fix: FTP: 4.0: the server tried to bind outgoing connections to a fixed port, thus creating problems for multiple "active" file transfers.
Bug Fix: SMTP: 4.1: initial prompt timeouts for "last" relays were shorter than timeouts for other relays.
Bug Fix: SMTP: 3.0: AUTH-ed messages were not relayed if the Relay to Non-Client IPs setting was set to Nobody.
Bug Fix: LIST: 4.0: certain multipart messages sent to a list could crash the server.
Bug Fix: IMAP: 2.0: the LISTRIGHTS response did not include the "required rights" element.
Bug Fix: Migration: 3.0: the MoveIMAPMail utility could crash on 64-bit platforms.
Bug Fix: Utils: 2.0: the sendmail utility incorrectly checked error codes.
Bug Fix: Directory-Based Domains: 4.0: if an account was auto-created (by means of adding a directory record) and the domain Template contained an Initial Message, the server could crash.