Release Notes of inode v1.6.4

(1)

Release Notes of iNODE™ v1.6.4

Release Notes

(2)

Release Notes of iNODE™ v1.6.4

iNODE™ Release 1.6,

Copyright

All rights reserved. No part of this document may be reproduced in any form, including photocopying or transmission electronically to any computer, without prior written consent of Dataways Communications S.A.

This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://www.openssl.org/)

Trademarks

The Dataways name and logo and the iNODE™ Connectware name and logo are trademarks or registered trademarks in Greece and other countries. Linux is a registered trademark of Linus Torvalds. All other trademarks are properties of their respective holders.

(3)

A New full blown Caching DNS Server is implemented which can be configured to service multiple zones and control access to its DNS services. The DNS Server can be configured to be master, slave or dynamic for each zone independently and each zone can be fully configured with all types of Resource records. A New zone wizard can help you to quickly define a new zone.

The DNS Server can be configured to Forward requests to a list of forwarders and can control access to DNS Clients for their queries, recursions and zone transfer requests.

 System::Custom DNS Servers for local system demands

You can define your desired DNS Servers for the system to be used.

The system itself is used as a DNS Server by default. This is useful if you are using iNODE in a closed or private network where DNS

(5)

Service is currently running on other systems and DNS access to the Internet is not allowed.

 Proxy Server::WPAD protocol support

Web Proxy Auto Discovery is a protocol that is used by browsers for automatic setup of Proxy Servers. iNODE™ new DHCP Server can share the custom option 252 which is the Internet Explorer default WPAD method for Automatic Proxy discovery. This option tells IE where the Proxy Auto Configuration (PAC) file is located. iNODE™

can automatically create & share such a PAC file for client demands. For more info about this option please check Online Help or ask your Reseller.

 Proxy Server::Bypass proxy forwarding

In many cases where iNODE™ Proxy needed to be configured to forward proxy requests to a parent proxy it is required that this parent proxy should be bypassed for some destination URLs. It is now possible to define an Access Control Filter URL-list which contains the URLs that should be served directly by the local proxy and so bypass the parent proxy for them. (ENH#456)

 Fax Server::Fax Protocol not tagged category

On the Fax Protocol there is a new selection category for all documents that are not already tagged (“not tagged”). This category has been implemented on both Incoming & Outgoing Fax Protocol. (ENH#457)

 Email Server::Maximum IMAP or POP3 clients

In some cases there is a need to limit the maximum connections to the Email Server because there is not enough resources. In such cases there is a new option on Email Server to limit the total connections to a specific number or leave them unlimited.

(ENH#427)

 Email Server::Extreme load handling

In extreme system loads there is a new option to block new SMTP connections beyond a specific threshold level. (ENH#438)

 Email Server::Mailboxes Repair Function

There are rare cases during power outages or hardware problems where mailboxes get corrupted and mail is not accessible by the users. In such cases there is a new mailbox repair function on Email Server. (ENH#415)

 Maintenance::Backup compression option

Until now all backups (file, fax, Email) are by default compressed with zip compression. From now on it is possible to selectively define if the backup file should be in compressed format or not.

(ENH#449)

(6)

 Firewall::WebGUI access restrictions control

The former “Allow Remote Management” in General Settings of the Firewall has been changed so that access to WebGUI could be always possible via LAN IP Subnets in which the system is listening on. This option has been renamed to “Trusted only Web GUI Access” so that access to WebGUI be possible from trusted sources (LAN and VPN Users) if it is checked. You can now control access on WebGUI via Firewall Self Protection with custom rules by specifying any of the WebGUI ports (http/9235, https/9236). Note that access via LAN IP Subnets cannot be blocked because this could result on a lockout situation.

Attention (check before upgrading): If you have unchecked the Option “Allow Remote Management” and you are accessing WebGUI via remote network (any network that is different from defined LAN IP Subnets on LAN Interface page) and you are not connected as a VPN Client you will not have access to WebGUI after upgrade. So we recommend to check this option before proceed to upgrade.

Otherwise you will lose access and you will need to be connected via LAN IP Subnets or VPN to regain access to it.

 Email Content Filtering::New content Filtering engine

The latest content filtering engine/analyzer has been included in this release.

(7)

Bug fixes

This release includes several bug fixes.

The bug fixes of iNODE v1.6.4 are listed below:

1. [BUG #419] A user can be deleted even if it is used on other parts of the system configuration.

2. [BUG #422] A rules creations error has been reported during proxy bandwidth management rules creation. It is a WebGUI bug.

3. [BUG #439] A high CPU utilization has been reported during FTP Server operation in rare cases. A newer version of FTP server has been installed which seems that is fixed similar problems.

4. [BUG #443] In some cases where thousands of messages are waiting on the Email message queue and you need to delete them it is difficult because it is very slow process. Now this has been fixed.

5. [BUG #444] During insertion of a new record or modification of an existing one on transparent proxy rules and it has a source IP/Network which is not unique it doesn’t allow you to proceed because it doesn’t checks the rest fields. It has been fixed and checks also the destination IP/Network.

6. [BUG #447] SMTP & POP3 Proxy enable or disable options on Transparent proxy rules form are shown even if they are not licensed (Email Content Filtering).

7. [BUG #452] Delete from protocol option on a scheduled fax archiving task is ignored. The option works well and the respective documents are deleted only on manual running of a task. It has been fixed now.

8. [BUG #453] Anti-spam Bayesian classifier training does not allow uploading of a mbox file larger than 64KBytes.

9. [BUG #454] If you enter single quote character in Fax protocol fields (e.g. User Comments) an unspecified format error will be shown.

10. [BUG #455] During a fax archive restore records that has been deleted from active fax protocol are not shown during restore but the deleted records finally restored. It has been fixed and only the shown records will be restored.

11. [BUG #458] Incoming Fax Auto-register rules don’t work. It has been fixed now.

12. [BUG #459] Email validations anywhere on WebGUI do not allow a domain with top level domain longer than 2 characters.

13. [BUG #461] Email Virtual Domains not updated with new users. It has been fixed.

14. [BUG #462] Anti-spam levels cannot be set with value 0.

15. [BUG #464] VPN Server authentication failure even if the user has the right for VPN. It has been fixed.

(8)

16. [BUG #466] It has been reported that sometimes Data courier tasks terminated unexpectedly with timeout errors with data transfers with multi-megabyte files. A newer version of replication protocol has been installed which works well with big files.

As always do with the previous version patches, the published patches of previous version 1.6.3 have been included in this release so please refer to the following Patch Notes for more bug-fixing report:

 Patch Notes number 163-001

(9)

Known Problems

Known problems of the current version are:

 HTTP Upload or Download file size limit

The maximum upload file size in any relative web interface form is limited to 2GB. This could be a problem if you want to restore a fax backup which is greater than 2GB in size. In such a case you need to upload the backup via a File Server Share point. An alternative method for uploading/downloading large files was implemented on the current release via System FTP service. Please read above for this new feature.

 Maximum FileAV check filesize = 2GB

File Server Antivirus service will not scan for viruses in files that are more than 2GB in size.

 AVM Fritz!Card PCI Fax reception

We’ve noticed that there are reception only problems in cases where AVM Fritz!Card PCI board is used from the Fax Server. Such problems noticed only from some Fax machines (some Xerox model’s). These fax machines cannot sent fax to AVM Fritz!Card at all. On these cases the Fax Server will receive the message “Error no fax data was received”

on real time log. We recommend using Active ISDN boards or external Fax/modems for production.

 Random Fax preview problems

Rarely in some cases may be not possible to preview a fax document.

This problem may occur randomly with error “File does not begin with '%PDF-'” (BUG#256).

 Per sender/recipient Mail Statistics may be incorrect

There is a known problem on mail server statistics page where the per sender or per recipient statistics may be incorrect. (BUG#268).

 Content Filtering AntiVirus statistics error

In cases where a virus has been detected with identification name which contains spaces then an error may be displayed on Antivirus statistics with the following details : “amavis-stats::error: rrd_graph():

127” (BUG#298].

 Some Real-time log lines may be not shown

In cases where too many lines were added fast on some log file, some lines may be not shown on Real-time log view (BUG#303).

 L2TP Server may crash randomly.

There is a problem with random crash of L2TP Server (BUG#307).

(10)

 Shared Printer Drivers are not accessible by SMB Print Clients.

Client printer drivers are not accessible by SMB clients as defined by Client Driver Administrator.

 Plain IPSec or IPSec/L2TP connection from directly attached LAN.

IPSec connection failing from directly attached IPSec clients on LAN or WAN interface (BUG #308).

 Dialogic DIVA Server and AVM Fritz!Card PCI Fax conflicts

Do not use Dialogic Diva Server board together with AVM Fritz!Card PCI on the same system. They are conflicting on kernel CAPI stack.

(11)

Hardware Support

For a complete report of supported hardware on the current release please refer to the Release Notes or 1.6.0 release.

In addition to that list the Dialogic® Diva™ PCI Express adapters are now supported on the system.

(12)

Hardware Recommendations

The minimum and recommended hardware requirements to run iNODE™

v1.6.4 is shown on the following matrix.

Minimum Recommended

CPU Pentium II Dual Core

RAM 256MB 1GB

CDROM IDE/SCSI IDE

HARDSIDK IDE 6GB SATA 80GB NIC One 10BaseT Two 1000BaseT

Note: iNODE™ v1.6.4 is tested to run on the EMC VMWare Server and Citrix XenServer environments but not supported in these configurations yet.

(13)

Memory Consumption

As a general guide for memory requirements on your system you can consult the following matrix:

RAM requirements (MBytes)

Base System 200

DHCP Server 5

DNS Server 2 minimum – user defined cache

VPN Server – PPTP 1,5

each pptp connection 2,5

VPN Server – IPSec 11,5

VPN Server - L2TP 1,5

each L2TP connection 2

VPN Client – PPTP 5

Fax Server 8

each capi modem 2,5

each legacy modem 4

File Server 35

each CIFS client connection 8

Print Server 6

Publisher 2

each data courier socket 3

Data Courier task 6,5

Web Courier task 5,5

Mail Server 120

each SMTP socket 2

each POP3 or IMAP4 socket 15

Webmail 65

Content filtering engine 30

SMTP proxy base 2

each SMTP proxy connection 2

POP3 proxy base 4

each POP3 proxy connection 4

each thread (default 3) w/o Antispam 19

each thread (default 3) with Antispam 35

Each AV Engine 30

Proxy Server 15

Proxy RAM user defined (20 default)

(14)

How to install

iNODE™ v1.6.4 installation is a straight forward procedure with minimum skills required. The installation process will start after booting from the Installation CD. There are some questions about correct time/date and about hard disk preparation. The installation time will last about 15 minute. More info you can find on iNODE™ Quick start Guide.

Upgrade from previous versions

ATTENTION: BEFORE PROCEEDING TO AN UPGRADE DO NOT FORGET TO TAKE A SYSTEM & DATA BACKUP ON THE RUNNING iNODE™ SYSTEM.

iNODE™ v1.6.4 upgrade from previous release v1.6.3 is available for download on the website. The system requirements for the upgrade are at least 512MB total physical RAM and 6GB free hard disk space. Otherwise proceed to a cleanup of logs and File server files or upgrade RAM before doing the software upgrade.

On successful upgrade the system will be automatically rebooted.

(15)

Older versions backup files compatibility

ATTENTION: ALL BACKUP FILES ARE DESIGNED FOR DISASTER RECOVERY AND CAN BE USED FOR RESTORE PURPOSES. AFTER A RESTORE YOU WILL RECOVER THE FUNCTIONALITY TO THE LAST STATE BEFORE THE BACKUP OPERATION. AS A GENERAL RULE YOU SHOULD NOT RESTORE ANY BACKUP FROM OLDER iNODE™ VERSIONS!

The Restore operations on iNODE™ v1.6.4 accepts backup files according to the following matrix:

Backup file Version Acceptance

System backup 1.6.4 Yes

System backup 1.x.x No

File Backup 1.6.x Yes

Fax backup 1.6.x, 1.5.x, 1.4.x, 1.3.x Yes

Fax backup 1.x.x No

Fax archive 1.6.x Yes

Mail backup 1.6.x, 1.5.x Yes

Mail backup 1.x.x No

(16)

FAQ

About Installation

Q: What is the minimum hardware requirements in order to install iNODE™ ? A: Please see on Hardware Recommendations section above

Q: Do I need to have Linux skills in order to install iNODE™?

A: Not at all. iNODE™ is a software package for novice administrators. You need to boot from the Installation CD. So, you need to set the appropriate PC BIOS booting sequence. After boot up there are only a few simple questions about system clock and hard disk preparation.

Q: Can I have iNODE™ and other Operating System coresident on the same PC?

A: No. iNODE™ will use all system resources during normal operation. If you need to install it for demo purposes into your mobile PC you can install it as a virtual machine by using known virtual PC environments. In such cases no support will be given by manufacturer.

Q: Can I use Installation CD to upgrade from an existing earlier iNODE™ release?

A: No. By using Installation CD a fresh installation will be applied to the installed system. If you need to retain your previous settings you need to perform the upgrade via iNODE™ web interface or you should configure them manually.

Q: Are my settings remain intact during upgrade from an existing earlier iNODE™

release?

A: Yes. Your current settings and operating data will be left as it was before by upgrading to 1.6.4.

Q: Is it possible to install iNODE™ on a RAID system or a SCSI hard disk?

A: Yes. From now on iNODE™ supports installation on IDE P-ATA, SATA/SATAII or SCSI, SAS, RAID, SAN hard disk storage. You should check your storage system against the Hardware Support section above. New storage drivers are constantly added. Do not hesitate to contact support team for a non supported storage driver. We will most probable be included your storage system driver in our next maintenance release. Software RAID Controller (common embedded RAID controllers) are not currently supported.

Q: Is it possible to make a copy of the iNODE™’s hard disk?

A: No. iNODE™’s hard disk cannot be copied to another hard disk. The only way is to reinstall it via Installation CD. We do not recommend installations via disk cloning. Always use the standard installation procedure.

Q: I have the installation CD. Can I install it and use it for trial purposes?

A: The iNODE™’s installation CD is the same whether you have purchased the iNODE™ system or you are installing it for trial or demo purposes. Once installed

(17)

and configured through the start up wizard the system will operate for 30 days. If you decide to purchase the system then you can contact your local reseller or the manufacturer.

Q: My network card has failed. Can I replace it?

A: Yes. Once you installed the new network card you will have to contact your reseller and ask for an activation key.

General Questions

Q: How can I obtain an Installation CD?

A: You can download the ISO image via Download section of the web site (http://www.inode.gr/support_downloads.php). Also It is possible to ask for a Demo CD by sending an email to democd at inode.gr.

Q: What is included in the INODE™ support contract?

A: It includes all software updates and support through the reseller that iNODE™

was purchased from.

Q: I have problems with the installation procedure. Where can I get help?

A: All support services are offered through the reseller network which is certified from the manufacturer. Through the certified reseller you can get all the assistance you might need. In case there is a major problem the reseller can contact the manufacturer and together they can give a solution to your problem.

Q: Am I able to download the sources of OSS used by iNODE™?

A: Yes. You can download all OSS used on iNODE™ v1.6.4 from Download section of http://www.inode.gr.

(18)

Further Help

You can obtain further help and documentation on iNODE™ website http://www.inode.gr or by contacting to your Reseller directly.

Also if you have a valid support contract you can contact with Dataways at:

(19)

75, Kanari Str. – GR54453 Thessaloniki – Greece

Tel. +30.2310 953953 Fax +30.2310 953963 e-mail info@inode.gr

iNODE™ Connectware names and logo are registered trademarks of Dataways Communications S.A.

All other referenced trademarks and names belong to their respective owners.

Doc Rev1.0 August 2009

Release Notes of inode v1.6.4