Release Notes for McAfee(R) WebShield(R) SMTP Version 4.5 MR2 Evaluation Version Copyright (C) 2005 McAfee, Inc. All Rights Reserved ========================================================== This Maintenance Release (MR) was tested with : - DAT Version: 4527, July 5th 2005 - Engine Version: 4.4.00 - Alert Manager (AM): 4.7 ========================================================== Thank you for using McAfee(R) WebShield(R) SMTP software. This file contains important information regarding this release.We strongly recommend that you read the entire document. IMPORTANT: The attached files are provided as is, and with no warranty either expressed or implied as to their suitability for any particular use or purpose. McAfee, Inc. assumes no liability for damages incurred either directly or indirectly as a result of the use of these files, including but not limited to the loss or damage of data or systems, loss of business or revenue, or incidental damages arising from their use. Patch files should be applied only on the advice of McAfee Technical Support, and only when you are actually experiencing the issue being addressed by the Patch. Patch files should not be proactively applied in order to prevent potential product issues. You are responsible for reading and following all instructions for preparation, configuration, and installation of Patch files. Patch files are not a substitute or replacement for product Service Packs which may be released by McAfee, Inc. It is a violation of your software license agreement to distribute or share these files with any other person or entity without written permission from McAfee, Inc. Further, posting of McAfee Patch files to publicly available Internet sites is prohibited. McAfee, Inc. reserves the right to refuse distribution of Patch files to any company or person guilty of unlawful distribution of McAfee software products. Questions or issues with McAfee Patch files should be directed to McAfee Technical Support. You can use this Maintenance Release to : - Create a fresh installation of WebShield SMTP 4.5 MR2. The installer contains a complete version of the WebShield SMTP software with MR2 applied. Make sure you install Alert Manager 4.7 AFTER you have installed this MR2 release.This installer does not have Alert Manager 4.7 bundled with it. If you need to download this Maintenance Release at a later date, it can be obtained from the McAfee web site at: https://secure.nai.com/us/forms/downloads/upgrades/login.asp You will need to supply your customer grant number or user name and password to access this site. __________________________________________________________ WHAT'S IN THIS FILE - New Features - Installation - Resolved Issues - Known Issues - Participating in the McAfee Beta Program - Contact Information - Copyright & Trademark Attributions - License Information __________________________________________________________ NEW FEATURES This Maintenance Release 2 is a roll up of all the HotFixes that have been released since the release of Patch WSP0803. It supersedes any previous WebShield SMTP releases, such as MR1a. Refer to the original WebShield SMTP documentation for information on how to use the software’s features. Information about resolved and known issues is included in this Readme file. ________________________________________________________ INSTALLATION ================== FRESH INSTALLATION ================== Refer to the WebShield SMTP Installation Guide for detailed installation steps. TESTING YOUR INSTALLATION Once installed, the WebShield SMTP program is ready to scan your system for infected files. You can test whether the program has installed correctly and verify that it can properly scan for viruses by implementing a test developed by the European Institute of Computer Anti-virus Research (EICAR), a coalition of anti-virus vendors headquartered in Europe, as a method for their customers to test any anti-virus software installation. To test your installation, follow these steps: 1. Open a standard text editor, such as Microsoft Notepad. 2. Copy the following line into its own file, making sure you do not include any spaces or line breaks. Save the file with the name EICAR.COM: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUSTEST-FILE!$H+H* The file size will be approximately 70 bytes. 3. Start the WebShield SMTP software, and send an e-mail message with the EICAR test file as an attachment: - From an external email account to an internal email account. - From an internal email account to an external email account. When the WebShield SMTP software examines the e-mail message, it will report finding the EICAR test file, but you will not be able to clean or repair the EICAR file because it is a test file. IMPORTANT: The EICAR test file does not contain a virus. It cannot spread, infect other files, or harm your system. Delete the file when you have finished testing your installation to avoid alarming other users. REMOVING THIS RELEASE Goto the Windows Control Panel-->Add Remove Programs. Choose WebShield SMTP and say Remove.Follow the on-screen instructions to remove the software. __________________________________________________________ RESOLVED ISSUES In addition to the resolved issues listed in the Readme for Patch WSP0803, the following issues have also been resolved with this release: 1. A certain message sample caused the MailScan process to continuously hang, eventually crashing the MailScan process. 2. There was an issue on update failure where FRONTEND.EXE hung and all further updates failed unless the services were restarted. 3. WebShield SMTP was not detecting a virus which had multi-part alternative MIME ("W32/MyWife.a@MM" virus). 4. There was an issue with detecting the "JS/Zerolin" virus. 5. Messages infected with the "bagle" virus got stuck in the "In folder" of WebShield SMTP 4.5 patch 8, and it caused the software to hang with the Alert Manager service at 100% CPU utilization and the MailScan process became unresponsive. 6. E-mail messages detected with the "W32/Bagle" virus and its variants were sent as blank e-mail messages. WebShield SMTP did not replace the attachment with a warning.txt as usual. In addition, the entire header (except the sender information) was removed from the message. 7. The MailScan process detected e-mail messages with disclaimer text as corrupt. 8. If a Content filter rule was set to block *.exe attachments (or any other file extension) and e-mail messages were sent using MS-Outlook in Rich Text Format, the Content filter rule failed to trigger. __________________________________________________________ KNOWN ISSUES 1. This Release will support and interact with the new Alert Manager (AM) 4.7 service. Therefore it is mandatory that AM 4.7 is installed. 2. Users may not get alerts for certain types of events. If this happens, you may need to change either the priority levels for those messages or change the AM configurations for generating those messages (including those for informational messages). This can be done through the AM Program Menu options. The AM priority settings are not mandatory because different users like to be alerted differently based on priority levels. __________________________________________________________ PARTICIPATING IN THE MCAFEE BETA PROGRAM To download new beta software or to read about the latest beta information, visit the McAfee beta web site located at: http://www.mcafeesecurity.com/us/downloads/beta/mcafeebetahome.htm To submit beta feedback on any McAfee product, send e-mail to: mcafee_beta@mcafee.com McAfee is devoted to providing solutions based on your input. __________________________________________________________ CONTACT INFORMATION SECURITY HEADQUARTERS: AVERT (Anti-Virus & Vulnerability Emergency Response Team) Home Page http://www.mcafeesecurity.com/us/security/home.asp Virus Information Library http://vil.mcafeesecurity.com/ AVERT WebImmune & Submit a Virus Sample https://www.webimmune.net/default.asp AVERT DAT Notification Service http://vil.mcafeesecurity.com/vil/join-DAT-list.asp DOWNLOAD SITE Home Page http://www.mcafeesecurity.com/us/downloads/ Anti-Virus DAT File and Engine Updates http://www.mcafeesecurity.com/us/downloads/updates/ ftp://ftp.mcafee.com/pub/antivirus/datfiles/4.x Anti-Spam Rules File and Engine Updates ftp://ftp.nai.com/spamdefs/1.x/ Product Upgrades https://secure.nai.com/us/forms/downloads/upgrades/login.asp Valid grant number required (contact Customer Service) TECHNICAL SUPPORT Home Page http://www.mcafeesecurity.com/us/support/technical_support KnowledgeBase Search https://knowledgemap.mcafeesecurity.com/phpclient/homepage.aspx PrimeSupport Service Portal (Logon credentials required) https://mysupport.mcafeesecurity.com PSVANS — PrimeSupport Vulnerability Alert Notification Service http://www.mcafeesecurity.com/us/support/primesupport/ CUSTOMER SERVICE US, Canada, and Latin America toll-free: Phone: +1-888-VIRUS NO or +1-888-847-8766 Monday-Friday, 8am-8pm, Central Time E-mail: https://secure.nai.com/us/forms/support/request_form.asp Web: http://www.mcafeesecurity.com/us/support/default.asp MCAFEE BETA PROGRAM Download Site: http://www.mcafeesecurity.com/us/downloads/beta/mcafeebetahome.htm E-mail to Submit Beta Feedback: mcafee_beta@mcafee.com TRAINING: MCAFEE UNIVERSITY http://www.mcafeesecurity.com/us/services/education/mcafee/university.htm WORLDWIDE OFFICES For addresses and phone numbers of worldwide offices: http://www.mcafeesecurity.com/us/contact/home.htm _____________________________________________________ COPYRIGHT AND TRADEMARK ATTRIBUTIONS Copyright (C) 2005 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies. TRADEMARKS ACTIVE FIREWALL, ACTIVE SECURITY, ACTIVESECURITY (AND IN KATAKANA), ACTIVESHIELD, CLEAN-UP, DESIGN (STYLIZED E), DESIGN (STYLIZED N), ENTERCEPT, EPOLICY ORCHESTRATOR, FIRST AID, GROUPSHIELD, GROUPSHIELD (AND IN KATAKANA), INTRUSHIELD, INTRUSION PREVENTION THROUGH INNOVATION, MCAFEE, MCAFEE (AND IN KATAKANA), MCAFEE AND DESIGN, MCAFEE.COM, MCAFEE VIRUSSCAN, NA NETWORK ASSOCIATES, NET TOOLS, NET TOOLS (AND IN KATAKANA), NETSCAN, NETSHIELD, NETWORK ASSOCIATES, NUTS & BOLTS, OIL CHANGE, PRIMESUPPORT, SPAMKILLER, THREATSCAN, TOTAL VIRUS DEFENSE, VIREX, VIRUS FORUM, VIRUSCAN, VIRUSSCAN, VIRUSSCAN (AND IN KATAKANA), WEBSCAN, WEBSHIELD, WEBSHIELD (AND IN KATAKANA), YOUR NETWORK. OUR BUSINESS. are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. The color red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners. _____________________________________________________ LICENSE INFORMATION LICENSE AGREEMENT NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. LICENSE ATTRIBUTIONS This product includes or may include: * Software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/). * Cryptographic software written by Eric A. Young and software written by Tim J. Hudson. * Some software programs that are licensed (or sublicensed) to the user under the GNU General Public License (GPL) or other similar Free Software licenses which, among other rights, permit the user to copy, modify and redistribute certain programs, or portions thereof, and have access to the source code. The GPL requires that for any software covered under the GPL which is distributed to someone in an executable binary format, that the source code also be made available to those users. For any such software covered under the GPL, the source code is made available on this CD. If any Free Software licenses require that McAfee provide rights to use, copy or modify a software program that are broader than the rights granted in this agreement, then such rights shall take precedence over the rights and restrictions herein. * Software originally written by Henry Spencer, Copyright 1992, 1993, 1994, 1997 Henry Spencer. * Software originally written by Robert Nordier, Copyright (C) 1996-7 Robert Nordier. * Software written by Douglas W. Sauder. * Software developed by the Apache Software Foundation (http://www.apache.org/). A copy of the license agreement for this software can be found at www.apache.org/licenses/LICENSE-2.0.txt. * International Components for Unicode ("ICU") Copyright (C) 1995-2002 International Business Machines Corporation and others. * Software developed by CrystalClear Software, Inc., Copyright (C) 2000 CrystalClear Software, Inc. * FEAD(R) Optimizer(R) technology, Copyright Netopsystems AG, Berlin, Germany. * Outside In(R) Viewer Technology (C) 1992-2001 Stellent Chicago, Inc. and/or Outside In(R) HTML Export, (C) 2001 Stellent Chicago, Inc. * Software copyrighted by Thai Open Source Software Center Ltd. and Clark Cooper, (C) 1998, 1999, 2000. * Software copyrighted by Expat maintainers. * Software copyrighted by The Regents of the University of California, (C) 1989. * Software copyrighted by Gunnar Ritter. * Software copyrighted by Sun Microsystems(R), Inc. (C) 2003. * Software copyrighted by Gisle Aas. (C) 1995-2003. * Software copyrighted by Michael A. Chase, (C) 1999-2000. * Software copyrighted by Neil Winton, (C) 1995-1996. * Software copyrighted by RSA Data Security, Inc., (C) 1990-1992. * Software copyrighted by Sean M. Burke, (C) 1999, 2000. * Software copyrighted by Martijn Koster, (C) 1995. * Software copyrighted by Brad Appleton, (C) 1996-1999. * Software copyrighted by Michael G. Schwern, (C) 2001. * Software copyrighted by Graham Barr, (C) 1998. * Software copyrighted by Larry Wall and Clark Cooper, (C) 1998-2000. * Software copyrighted by Frodo Looijaard, (C) 1997. * Software copyrighted by the Python Software Foundation, Copyright (C) 2001, 2002, 2003. A copy of the license agreement for this software can be found at www.python.org. * Software copyrighted by Beman Dawes, (C) 1994-1999, 2002. * Software written by Andrew Lumsdaine, Lie-Quan Lee, Jeremy G. Siek (C) 1997-2000 University of Notre Dame. * Software copyrighted by Simone Bordet & Marco Cravero, (C) 2002. * Software copyrighted by Stephen Purcell, (C) 2001. * Software developed by the Indiana University Extreme! Lab http://www.extreme.indiana.edu/). * Software copyrighted by International Business Machines Corporation and others, (C) 1995-2003. * Software developed by the University of California, Berkeley and its contributors. * Software developed by Ralf S. Engelschall for use in the mod_ssl project (http://www.modssl.org/). * Software copyrighted by Kevlin Henney, (C) 2000-2002. * Software copyrighted by Peter Dimov and Multi Media Ltd. (C) 2001, 2002. * Software copyrighted by David Abrahams, (C) 2001, 2002. See http://www.boost.org/libs/bind/ bind.html for documentation. * Software copyrighted by Steve Cleary, Beman Dawes, Howard Hinnant & John Maddock, (C) 2000. * Software copyrighted by Boost.org, (C) 1999-2002. * Software copyrighted by Nicolai M. Josuttis, (C) 1999. * Software copyrighted by Jeremy Siek, (C) 1999-2001. * Software copyrighted by Daryle Walker, (C) 2001. * Software copyrighted by Chuck Allison and Jeremy Siek, (C) 2001, 2002. * Software copyrighted by Samuel Krempp, (C) 2001. See http://www.boost.org for updates, documentation, and revision history. * Software copyrighted by Doug Gregor (gregod@cs.rpi.edu), (C) 2001, 2002. * Software copyrighted by Cadenza New Zealand Ltd., (C) 2000. * Software copyrighted by Jens Maurer, (C) 2000, 2001. * Software copyrighted by Jaakko Järvi (jaakko.jarvi@cs.utu.fi), (C) 1999, 2000. * Software copyrighted by Ronald Garcia, (C) 2002. * Software copyrighted by David Abrahams, Jeremy Siek, and Daryle Walker, (C) 1999-2001. * Software copyrighted by Stephen Cleary (shammah@voyager.net), (C) 2000. * Software copyrighted by Housemarque Oy , (C) 2001. * Software copyrighted by Paul Moore, (C) 1999. * Software copyrighted by Dr. John Maddock, (C) 1998-2002. * Software copyrighted by Greg Colvin and Beman Dawes, (C) 1998, 1999. * Software copyrighted by Peter Dimov, (C) 2001, 2002. * Software copyrighted by Jeremy Siek and John R. Bandela, (C) 2001. * Software copyrighted by Joerg Walter and Mathias Koch, (C) 2000-2002. DBN 001-EN V3.1.2