Version 6.2

Introduction
Installation
SysAdmin
Network
Objects
Storage
E-mail
Real-Time
Access
Services
Directory
Clusters
Applications
Miscellaneous
Licensing

WebMail
Pronto!
PBX

Introduction	Features	History	How To	Help Me

Version 6.2 Revision History

RSS

Cluster upgrade note: for rolling upgrades, your Cluster must be upgraded to the 6.1.14 or better version before upgrading to any 6.2 version.

6.2.0 20-Nov-2017
Valid Core License Keys: issued after 01-Oct-2016.

IMPORTANT: the End User License Agreement has been modified.
Pronto: Pronto! HTML Version 6.2.0 is included.
PKI: added support for Subject Alternative Names in certificate requests and self-signed certificates.
KERNEL: the initial support for encrypted mailboxes has been implemented.
QUEUERULES: the Calendar Method condition for account and domain level rules has been implemented.
QUEUERULES: the whitelisted option for the Source condition has been implemented.
KERNEL: the Application Helpers has been implemented.
Bug Fix: AIRSYNC: 6.2c5: meetings might be duplicated.
Bug Fix: AIRSYNC: 5.2: synchronizing large folder trees with large messages might cause server crashes.
Bug Fix: LIST: 6.1.5: incorrect encoding of specific distribution subjects could break message formatting.

6.2c5 31-Oct-2017
Valid Core License Keys: issued after 01-Oct-2016.

Pronto: Pronto! HTML Version 6.2c5 is included.
MAPI: the MAPI Connector version 1.54.12.21 is included.
WEBADMIN: the Threads monitor now displays CPU utilization values per thread (for Windows, Linux and FreeBSD 11).
ACCOUNTS: the Reroute External Recipients to option has been implemented.
ACCOUNTS: the initial support for application passwords has been implemented.
CLI: the GETACCOUNTONESETTING command has been implemented.
PKI: the built-in Trusted Root Certificates list has been renewed.
WEBADMIN: monitoring Failed Logins and Protocol Errors IP Address lists has been implemented.
WEBADMIN: Urgent Notifications have been implemented.
Bug Fix: CHRONOS: 5.4: unprocessed schedules might be discarded on server stop.
Bug Fix: AIRSYNC: 5.2: particular events in recurring series could not be declined.
Bug Fix: AIRSYNC: 5.2: additional attendees in event exceptions were not processed.
Bug Fix: AIRSYNC: 5.2: meeting requests and responses might be not processed properly on iOS devices.
Bug Fix: AIRSYNC: 5.3: logging responses at All Info might crash server.
Bug Fix: LIST: 5.4: long real names could be encoded incorrectly.
Bug fix: SIP: 6.1: the "Optional Media security" option was not properly processed.
Bug Fix: ACCOUNTS: 5.1: multiple simultaneous failures to login into the same account could crash the server.

6.2c4 21-Sep-2017
Valid Core License Keys: issued after 01-Sep-2016.

Pronto: Pronto! HTML Version 6.2c4 is included.
MAPI: the MAPI Connector version 1.54.12.20 is included.
LIST: the Hide 'From' Addresses setting is replaced with Compose 'From' Address as:.
ACCOUNTS: added option to require logins over encrypted connections.
WEBSKIN: extra protection from WebUser session stealing and cross-site scripting.
WEBUSER: extra protection from WebUser session stealing and cross-site scripting.
UTILITIES: the mail utility now supports -E parameter.
UTILITIES: the sendmail utility now ignores more parameters for compatibility.
LDAP: the paged output (RFC2696) of search results now works faster.
Kernel: SHA-384 and SHA-512 digesting algorithms have been implemented.
WEBADMIN: monitoring Temporary Blocked and Temporary Client IP Address lists implemented.
WEBADMIN: In Mail-SMTP-Receiving monitor the authenticated account name is displayed now.
WEBADMIN: In Access monitors the TLS-encrypted connections are indicated now.
XIMSS: the calendarForward operation has been implemented.
ACCOUNTS: the Authentication URI option has been implemented (for LDAP).
ROUTER: the _dir suffix support has been implemented for Directory-assisted relaying.
HTTP: added support for multiple Set-Cookie fields in responses to requests.
Bug Fix: DOMAINS: 6.2c3: Messages from mailing lists were not signed with DKIM.
Bug Fix: TLS: 6.2c2: AES GCM encryption could crash the server on some platforms.
Bug Fix: SMTP: some locally generated messages might be considered as relayed and blocked with restricted relaying settings.
Bug Fix: HTTP: some requests with chunked encoding proxied to cluster backends might be processed incorrectly.
Bug Fix: Directory: when deleting a Local Unit some files could stay orphaned.
Bug Fix: AIRSYNC: 5.2: calendar items updated server-side could not be removed.

6.2c3 29-Apr-2017
Valid Core License Keys: issued after 01-Apr-2016.

Pronto: Pronto! HTML Version 6.2c3 is included.
WEBUSER: editing multiple Identities implemented.
CLI: The VERIFYACCOUNTIDENTITY method implemented.
ACCOUNTS: 'From' Address Restrictions and 'From' Name Restrictions settings implemented.
QUEUE: verifying the validity of From: header in messages from authenticated senders implemented.
SIGNAL: Push notifications to iOS and Android devices for incoming calls and IMs have been implemented.
LDAP: search for non-routable address under the dc=cgprouter base now returns empty result rather than routing error.
XMPP: blacklisting by domain name has been implemented.
XIMSS: notifications on mailbox changes are sent now also when a mailbox is created/renamed/removed.
QUEUERULES: the actions Accept Request and Accept Reply can be applied now to Tasks Requests and Replies.
Bug Fix: AIRSYNC: 5.4: double quotes in the display name part of email addresses might be processed incorrectly.
Bug Fix: LIST: 4.1: header/trailer texts were added with extra EOLs to HTML-formatted messages.

6.2c2 31-Mar-2017
Valid Core License Keys: issued after 01-Mar-2016.

Pronto: Pronto! HTML Version 6.2c2 is included.
DOMAINS: adding DKIM Signatures to outgoing messages implemented.
PBXLEG: SendCallRegister() function is documented.
RSIP: registration period is properly adjusted according to remote server responses.
SIP: the "system overloaded" is now mapped to SIP error code 503.
SIP: the RetryAfter parameter in SIP 503 responses is respected now.
SIP: implemented the option to log call-related SIP requests and responses at the All Info level.
SMTP: domain name in server prompt now follows the same rules as parameter to HELO/EHLO.
SMTP: certificates from secondary domains can be sent when requested by the remote server.
TLS: AES Galois Counter Mode cipher suites are implemented.
QUEUE: Message revocation mechanism has been implemented.
Bug Fix: PBX: 5.4: error code 423 was not handled correctly.
Bug Fix: AirSync: 5.2: extra quotes might be added to real names in e-mail addresses and break formatting.
Bug Fix: TLS: 6.1c processing client certificates could not be optional.

6.2c1 14-Feb-2017
Valid Core License Keys: issued after 01-Feb-2016.

WEBADMIN: the "with DMARC" item added to "Check SPF records:" menu in SMTP module settings.
SMTP: RFC7489 (Domain-based Message Authentication, Reporting, and Conformance (DMARC)) implemented (the authentication part).
Kernel: RFC6376 (DomainKeys Identified Mail (DKIM) Signatures) signature checking implemented as part of DMARC support.
Kernel: the Public Suffix List of domains is included as a service (required by DMARC).
WEBUSER: now only folders of appropriate class can be selected for specific purposes (default Calendar, Tasks etc.).
Kernel: the account preferences data were moved from account.info file into a separate file.
DOMAINS: the Comment attribute is implemented.
WEBADMIN: the Scheduled Tasks of an Account are now visible in Status page.
ACCOUNTS: the File Storage now supports files larger than 4GB.
FTP: the module now supports transfer of files larger than 4GB.
WEBUSER: the "Redirect all Mail to" simplified rule redesigned to be DMARC-compatible and renamed to "Copy all Mail to".
WEBUSER: choosing From: address from multiple Identities implemented.
WEBUSER: default Directory Address Books implemented.
STATISTICS: the cpuTimeUsed element is implemented.
ACCOUNTS: Password expiration option is implemented.
WEBADMIN: Limitation and Rate Control for the number of recipients in outgoing e-mail messages are implemented.
WEBADMIN: Supplementary Log Files now can be deleted automatically.
WEBADMIN: the Log Out button has been added.
CG/PL: the ReadSkinObject function has been documented.
SESSION: two-factor authentication framework has been implemented.
XIMSS: the protocol has been extended to support two-factor authentication and forced password change.
WebUser: the interface has been extended to support two-factor authentication and forced password change.

Summary

ACCOUNTS

Password expiration option is implemented.
The File Storage now supports files larger than 4GB.
Account stores the last five IP addresses confirmed with Two-Factor Authentication.
'From' Address Restrictions and 'From' Name Restrictions settings implemented.
Added option to treat only logins over encrypted connections as secure.
The Authentication URI option has been implemented (for LDAP).
The Reroute External Recipients to option has been implemented.

AIRSYNC

Multiple fixes to problems with calendar event processing.

CG/PL

The ReadSkinObject function has been documented.
The SendCallRegister function has been documented.

CLI

The BLESSSESSION method has been implemented.
The VERIFYACCOUNTIDENTITY method has been implemented.
The GETACCOUNTONESETTING command is implemented.

DOMAINS

The Comment attribute is implemented.
Adding DKIM Signatures to outgoing messages implemented.

FTP

The module now supports transfer of files larger than 4GB.

KERNEL

The support for encrypted mailboxes has been implemented.
The Application Helpers has been implemented.
The account preferences data were moved from account.info file into a separate file.
The Public Suffix List of domains is included as a service (required by DMARC).
RFC6376 (DomainKeys Identified Mail (DKIM) Signatures) implemented.
SHA-384 and SHA-512 digesting algorithms have been implemented.

LDAP

Search for non-routable address under the dc=cgprouter base now returns empty result rather than routing error.
The paged output (RFC2696) of search results now works faster.

LIST

The Hide 'From' Addresses setting is replaced with Compose 'From' Address as:

MAILBOX

The Sliced format is used by default now.
Encrypted variants of mailbox formats are supported now.

PKI

The built-in Trusted Root Certificates list is renewed.
Added support for Subject Alternative Names in certificate requests and self-signed certificates.

PRONTO

Pronto! HTML Version 6.2 is included. It is the default "Pronto" interface now.

QUEUE

Message revocation mechanism has been implemented.
Verifying the validity of From: header in messages from authenticated senders implemented.

QUEUERULES

The actions Accept Request and Accept Reply can be applied now to Tasks Requests and Replies.
The Calendar Method condition for account and domain level rules has been implemented.
The whitelisted option for the Source condition has been implemented.

ROUTER

The _dir suffix support has been implemented for Directory-assisted relaying.

RSIP

Registration period is properly adjusted according to remote server responses.

SIGNAL

Push notifications to iOS and Android devices for incoming calls and IMs have been implemented.

SIP

The "system overloaded" is now mapped to SIP error code 503.
The RetryAfter parameter in SIP 503 responses is respected now.
Implemented the option to log call-related SIP requests and responses at the All Info level.

SMTP

RFC7489 (Domain-based Message Authentication, Reporting, and Conformance (DMARC)) implemented (the authentication part).
Domain name in server prompt now follows the same rules as parameter to HELO/EHLO.
Certificates from secondary domains can be sent when requested by the remote server.

STATISTICS

The cpuTimeUsed element is implemented.

TLS

AES Galois Counter Mode cipher suites are implemented.

WEBADMIN

Supplementary Log Files now can be deleted automatically.
Limitation and Rate Control for the number of recipients in outgoing e-mail messages are implemented.
The Scheduled Tasks of an Account are now visible in Status page.
The "with DMARC" item added to "Check SPF records:" menu in SMTP module settings.
The Log Out button has been added.
Monitoring Temporary Blocked, Failed Logins, Protocol Errors, and temporary Client IP Address lists implemented.
In Mail-SMTP-Receiving monitor the authenticated account name is displayed now.
In Access monitors the TLS-encrypted connections are indicated now.
The Threads monitor now displays CPU utilization values per thread (for Windows, Linux and FreeBSD 11).
Urgent Notifications implemented.

WEBUSER

Default Directory Address Books are implemented.
The "Redirect all Mail to" simplified rule has been redesigned to be DMARC-compatible and renamed to "Copy all Mail to".
Choosing From: address from multiple Identities implemented.
Now only Calendar-type mailbox can be selected as Main Calendar, only Tasks-type one as Main Tasks, etc.
Two-factor authentication is supported now.
Editing Identities has been implemented.
Extra protection from session hijacking has been implemented.

XIMSS

Commands for the Two-factor authentication is supported now.
Notifications on mailbox changes are sent now also when a mailbox is created/renamed/removed.
The calendarForward operation has been implemented.

XMPP

Blacklisting by domain name has been implemented.

UTILITIES

The mail utility now supports -E parameter.
The sendmail utility now ignores more parameters for compatibility.