SurfControl E-mail Filter 5.0.1 for SMTP                       June 2005

Welcome

What’s New in Version 5.0.1

License Information

Upgrading From a Previous Release

Installing SurfControl E-mail Filter 5.0.1

Rolling Back SurfControl E-mail Filter 5.0.1 to the Previous Release

Bug Fixes

Known Issues

Welcome

Welcome to SurfControl E-mail Filter 5.0.1 for SMTP. The SurfControl E-mail Filter installation includes the following components: 

You can choose to install Report Central automatically after the E-mail Filter installation process has finished. Alternatively you can install Report Central another time, or on a different server.

What’s New in Version 5.0.1

Version 5.0.1 contains the following enhancements:

Quicker Installation and Configuration

Fast installation.

The installation process is now quicker and more streamlined.

Configuration Wizard

Once you've finished installing E-mail Filter the Configuration Wizard will immediately guide you through the configuration process, so that you can protect your system against e-mail threats as soon as possible. Consult the Getting Started Guide for more information.

Improved Archiving

Smart Host Routing

You can now route e-mail messages to a specific mail server or MTA, according to the content of the message. For example, if your organization has an archiving policy, the E-mail Filter can send copies of e-mail messages that meet specific archiving criteria to the archiving server, while processing the original messages as usual.

To enable Smart Host Routing you need to make changes in:

·          The Server Configuration Console: see Administrator’s Guide Chapter 3 page 74.

·          The Rules Administrator: see Administrator’s Guide Chapter 6 page 234.

Digital Signature and Encryption Support

E-mail Filter can now process digitally signed messages.

This feature has the following known limitations:

·          If you have a rule enabled that adds a footer to a digitally signed message, the footer will become a separate message with the digitally signed message attached to it.

·          If the digitally signed message contains an attachment that triggers the Strip Attachments object, the entire message body will be removed.

·          The Strip Attachments object will always remove the entire message body of a digitally signed message unless you disable stripping of .p7c, .p7m and .p7.

Emerging Spam Protection

Enhanced Anti-Spam Agent

Digital Fingerprinting, Heuristics, LexiRules, and Neural Net provide industry-leading anti-spam effectiveness with zero administration cost.

Directory Harvest attack detection

Ensures that spammers cannot guess your e-mail addresses by brute-force attacks.

Web Threat Protection

URL Category List

Protects against inappropriate and fraudulent Web links in e-mails.

Confidential Data Protection

Expanded Dictionaries support

Includes 10 pre-packaged language packs, including: English, French, Spanish, Dutch, Italian, German, Portuguese, Japanese, Traditional Chinese, and Simplified Chinese.

You can now import and export words and dictionaries as text files.

Easier Virtual Learning Agent

Uses Adaptive Reasoning Technology to understand and protect your confidential data.

Improved Security

Denial of Service protection

Offers fine-tuning of all SMTP connections to detect and manage suspect SMTP traffic.

Secure Remote Access

Locks down remote administration by user logon.

Expanded Scalability

Unlimited Connection Threads

Supports unlimited simultaneous connections, scaling to meet requirements of the most demanding mail gateways.

Pipelining and Chunking (eSMTP)

Significantly improves mail throughput between mail servers that support these commands, such as MS Exchange and Lotus Domino.

LDAP Organizational Units

Tailors message-processing rules based on organizational structures defined in your LDAP server.

Easier Administration

Grouping of Rules

Organizes your rules by the type of e-mail threats being managed. The default ruleset includes anti-spam, network security, and other useful groupings.

Expanded Filtering in Rules

Supports inbound/outbound "Who" functionality, filtering of PDF, TNEF, and RTF, and supports Office 2003 and Web Archive formats.

Redesigned Server Configuration

Offers a more powerful way to configure any server and view settings by service.

E-mail notifications of failed events

Provides instant awareness that any scheduled event has not been successful.

Report Central

Provides web-based reporting of filtering activity, with ability to lock down reporting access by user.

Single Management Console

Allows easy administrative access to each SurfControl server within the organization, providing a single portal view of multiple SurfControl E-mail & Web Filter deployments.

Database Tools

Provides additional functionality in managing the SurfControl E-mail Filter database.

License Information

If you are evaluating SurfControl E-mail Filter, you can install and examine all the product components for a 30-day trial period by leaving the activation key fields blank during installation.

If you are an upgrading user who has a current subscription to the Anti-Spam Agent, then you should have received an activation key for the new URL Category List update service previously via e-mail. If you did not receive your key or are having trouble locating it, please contact your sales representative or customer service.

If you are upgrading and do not have subscriptions to any optional components, then you can try them out for 30 days free of charge, including LiveUpdates for each component.

Upgrading From a Previous Release

You can upgrade to SurfControl E-mail Filter v5.0.1 from these releases:

Detailed upgrade instructions are available here.

Installing SurfControl E-mail Filter 5.0.1

Double click the setup.exe icon to begin the installation process. The Setup Wizard will guide you through each step. Once the installation has finished, the Configuration Wizard will start immediately to help you configure E-mail Filter.

 

Rolling Back SurfControl E-mail Filter 5.0.1 to the Previous Release

You can remove version 5.0.1 and revert to version 4.6 or 4.7 using Control Panel > Add/ Remove Programs.

Bug Fixes

Version 5.0.1 contains cumulative bug fixes from versions 5.0, 5.0 SP1 and 5.0 SP2. These are listed in the table below:

Description

Issue Number

Defects Fixed in Version 5.0.1

The Setup Wizard no longer creates blank folders.

10209

Setup Wizard supports complex passwords.

10219

E-mail Filter can deny connections from all IP addresses except for explicitly-configured IPs.

13309

Messages with apostrophe in subject line are handled correctly by Web Administrator.

13621

MX records with same preference are selected at random.

13623

E-mail Filter generates boundary strings correctly on non-English operating systems.

13739

Archive rule now processes excel spreadsheets correctly.                 

13753

E-mail notifications support accented characters correctly.

13765

Send service tries MX records correctly.

13964

Temporary files from PDF2TXT are cleared correctly.

14023

Scheduled URL Category List updates correctly.

14275

Messages with attached .exe files trigger the file attachments rule correctly.

14276

Batch file to create new database cannot be activated accidentally.

15228

Reinstalling E-mail Filter retains previous configuration settings correctly.

15259

Messages infected with sober virus are cleaned and processed correctly.

15381

When upgrading to version 5.0.1 the newstemlog sql file is replaced correctly.

15593

Defects Fixed in Version 5.0

Customizable Telnet Greeting.

3845

E-mail Filter now detects all zip files.

4246

Making changes through remote administration no longer causes HTTP Error (500) internal server error.

5071

Import text file or words into dictionary.

6011

Banners are now added correctly.

7571

Rules service no longer skips part 3 of messages.

8345

Database log no longer shows critical error 2.

8363

Message filenames are now GUIDs.

8468

RTF attachments are now processed correctly.

8670

Queue Synchronization now parses message information correctly.

8968

Message is no longer requeued if MX record cannot be found.

9058

Top 20 Incoming Host IPs by Rules Triggered report now displays correct information.

9059

E-mail Filter now detects images e-mailed from cellular phones.

9111

Remote users using authentication is no longer rejected if there is no PTR record.

9239

Installing Message Admin client tools no longer causes an error.

9280

LDAP Group queries no longer fail on Netscape I-Planet LDAP Server.

9514

scTempDB is dropped correctly after an archive task in scheduler.

9547

Message with multiple word documents attached are processed correctly.

9834

Rule Checker Thread performs LDAP lookup correctly.

9835

Error deleting message info from STEMLog when running Queue Synchronization.

9868

Subdomains  no longer 'roll back' to main domain route.

9873

Message Administrator: Sort Results By Sender now functions correctly.

9896

Document Decomposition no longer leaves temporary files in the system32 folder.

9898

LDAP lookup supports nested groups.

9965

Header Modification works at domain name level.

10065

Footer and Banner rule now works correctly with base64 messages.

10072

Rules processing no longer corrupts HTML messages.

10224

Performance Monitor data source not visible on a Non-English OS.

10700

Message corrupted by rules service.

10929

TNEF messages are processed correctly.

11539

Messages are no longer corrupted when one or more recipients split out.

11540

Attached message turns to .stb.

11576

Messages containing MyDoom or Bagel virus no longer cause the Rules Service to stop responding.

12443

Defects Fixed in Version 5.0 Service Pack 1

MX records that return the value 127.0.0.1 are no longer rejected by receive service.

3468

Locked connections no longer prevent other connections being made.

13473

Timed-out connections no longer leave behind sc_lock files.

13637

Send service now correctly requeues e-mails if the Remote mail server does not respond.

13649

SurfControl temp directories have been moved to under the Work folder.

13681

NDRs are now sent from the RFC-compliant address of <>

13686

HTTP 500 error no longer occurs when saving rules that use LDAP.

13691

Directory Harvest Attack detection cannow  perform LDAP lookups on alias or proxy e-mail addresses.

13715

NDRs now contain the original message as an attachment.

13731

LDAP connection failure no longer causes rule service to hang.

13735

Accented characters are now displayed properly after adding footer text.

13738

Message contents are no longer swapped when system is under heavy load conditions.

13794

E-mail to some domains no longer returns the error code “554 5.5.2 Invalid data in message”.

13799

Send Service no longer removes the closing message boundary.

13809

Defects Fixed in Version 5.0 Service Pack 2

Improved Sophos SAVI support.

9932

E-mail Filter can deny connections from all IP addresses except for explicitly-configured IPs.

13309

Message attachments of unspecified content type are processed correctly.

13730

Messages with apostrophe in subject line are handled correctly by Web Administrator.

13621

MX records with same preference are selected at random.

13623

CRLF not removed after final message boundary.

13792

Header Modification Object modifies user-defined X- field correctly.

13798

PDF Files no longer trigger Rules service exception handling mechanism.

13800

File attachment boundary replaced correctly.

13868

E-mail Filter generates boundary strings correctly on non-English operating systems.

13739

Archive rule now processes Excel spreadsheets correctly.                 

13753

E-mail notifications support accented characters correctly.

13765

Messages with 8bit encoding greater than 100k are processed correctly.

13903

Send service tries MX records correctly.

13964

Mail from <> triggers WHO Object correctly.

13942

Base64 attachments no longer corrupted when size is exactly 100K (or multiple of 100K).

13994

Empty charset specifier no longer causes exception/crash in MailMessage

14002

Rules processing no longer adds CRLF to messages.

14024

URL rule processes URLs of more than 255 chararcters correctly.

14032

Message Boundary is no longer corrupted.

14159

Temporary files from PDF2TXT are cleared correctly.

14023

Scheduled URL Category List updates correctly.

14275

E-mail notifications return the virus name if the selected Anti-Virus Software is Ikarus .

14369

Known Issues

E-mail Filter 5.0.1 contains the following known issues:

Issue

Description

Defect Number

Report Central documentation references incorrect version number.

The SurfControl Report Central documentation and online help titles list the previous version. This is a cosmetic error; the documentation and online help also apply to the version 5.0 release.

12512

SurfControl Report Central requires the Java Runtime Environment (JRE).

When accessing Report Central from a client machine where the JRE is not installed, the user is prompted to download and install the JRE. The user must have administrator or power user permission on the PC in order to install the JRE. If the user does not have this level of permission, Report Central will not attempt to download the JRE and will display a Java icon instead of the Report Central start window. The solution is to grant the user administrator or power user permission on the PC or have a user with such permission log onto the machine and start Report Central, then download the JRE. Once the JRE has been installed on the machine, any user can then run Report Central on that machine.

12599

Import dictionary allows word value to be over 100.

 When you import a dictionary from a file, the Dictionary Manager does not check that word values are less than 100. You should take care to import word values of less than 100 for optimal usage of dictionaries in rules.

12817

Uninstalling leaves SurfControl folder.

Uninstalling the product leaves the root SurfControl E-mail Filter directory on the machine. Delete this folder manually after uninstalling the product.

13178

Switching on/off Rules logging always take immediate effect.

If you make changes in Server Configuration Rules Logging and press OK, you see a dialog asking "The configuration for one or more services needs to be updated. Update now?". The change takes effect immediately, even without a services restart.

13021

Use of symbols in queue name causes display issue in Queue Management.

If you use the following symbols in a queue name, and place the symbol at the very front of the queue name, it may cause some display problems in Queue Management:
     { (open curly bracket) (e.g. {test )
     } (close curly bracket) (e.g. }test )
     - (hyphen) (e.g. -test )

Avoid using these symbols at the start of queue names.

13238

Cut and Copy for Dictionary Manager do not function correctly.

If you double-click a word then cancel the edit and try to cut or copy any word in that dictionary, the cut or copy function does not work. The workaround is to switch to a different dictionary, then back to the one you were editing.

13256

Dictionary changes not saved using X button to close in Remote Client.

 When editing a dictionary in the Remote Client, you should not use the X button in the top-right corner to close the dictionary because your changes will not be saved.

13287

Customized SMTP greeting text disappear after incorrect edit.

 If you configure a customized SMTP Greeting Text and then make a change in SMTP parameters that is not a legal value, E-mail Filter displays an error. W