28
Aug
SecurityGateway Email Firewall v7.0 now available
The latest version of SecurityGateway Email Firewall is now available, for detailed information about what's new in this new version, please go here. ...
The latest version of SecurityGateway Email Firewall is now available, for detailed information about what's new in this new version, please go here. ...


In order to maintain their excellent reputation for secure software, Alt-N Technologies, developer of Exchange alternative MDaemon Messaging Server, continually perform rigorous testing across their portfolio of products, including both current and historic releases.
This year in particular, I've seen an increasing number of users' email account credentials become compromised, which has allowed spammers free reign to use their mail server to send spam out to the Internet.
The usual result is an overflowing outbound mail queue, thousands of bounce messages coming in and your server's IP address being blacklisted.
The first thing to note is that if your company has an email server, you should assume that spammers will always be trying to hijack users' accounts by guessing their passwords.
In this post I will run through a few simple pro-active settings checks that can reduce the chances of this happening and - in the unfortunate event that it does happen - can limit the resulting negative effects.
We've seen a sharp increase today in new virus variants getting through to email users due to the speed at which they're evolving to avoid detection.
We have recently been dealing with a range of customers who are using the SecurityMetrics PCI compliance check on their network and are in the process of working through the highlighted security vulnerabilities the report has brought to their attention.
Research In Motion™ have just released an important security patch for the BlackBerry Enterprise Server platforms that could potentially affect MDaemon Messaging Server.
This patch addresses a vulnerability in BlackBerry Enterprise Server (BES) that process images and so only affects MDaemon installations that have the optional BES server installed.
If you're an MDaemon customer running the BES component we recommend you follow the instructions in this knowledge base guide to be on the safe side.
We have seen two separate issues recently where MailStore had been configured to use directory services to synchronise its user list with an external source. One being an MDaemon mail server and the other on a machine running Kerio Connect.
In both cases, even though the IMAP user account details were correct, the password check failed with an error that suggested a bad authentication result.
As you can imagine, this one's got the potential to cause a fair amount of head-scratching - I see it quite a lot too.
Symptoms are that messages are being incorrectly quarantined by MDaemon's security module SecurityPlus even though the message is from a trusted sender and the attachment is clean of any viruses. Typically when we look into these examples there is one common factor.