Attachments converted to .dat files when sending from #Zarafa. Solved!

We recently investigated an odd issue whereby email attachments, sent using Zarafa Groupware, were being ‘mangled’ and received as .dat files.

It turned out that it’s not a bug in Zarafa Groupware, but a problem with old Outlook clients.

It’s known as the “RFC-2047 vs RFC-2231″ issue.

These RFC’s detail how filenames should be encoded in MIME format. The newer RFC-2231 ( ratified in 1997 !!) details how filenames should be encoded and long lines folded, and this is what Zarafa uses.

Exchange 2007 (and up) support RFC-2231, whereas Exchange 2003 (and below) is not able to understand the newer formatting. Dear knows why Microsoft haven’t patched the older versions 🙂

The new format kicks in if the attachment name exceeds 64 characters, which explains why some attachment filenames are OK and others are converted to ATTxxxx.dat. Because the old Outlook can’t understand the new formatting (when filename > 64 chars or international characters are used) it replaces the filename with the ATTxxx name.

To resolve this we have patched the MIME libraries to insert an old ( RFC-2047) encoded line as well as the correct RFC-2231 encoding.

There is one caveat however; some poorly engineered spam filters will strip out the old RFC encoded line! Inty’s Mail Defender does this. If you are sending to people who use this, then keep file names to less than 64 characters.

NOTES:

A properly encoded( RFC-2231) filename line:

name*0*=UTF-8”Updated%20-%20 Approaches %20to%20Major%20Markets%20-%20%20;name*1*=with%20some%20amends%2031st%20March%202014.docx

An old format ( RFC-2047) filename line would look like this:

name=”Updated – Approaches to Major Markets – with some amends 31st March 014.docx”

Posted in Zarafa | Leave a comment

#Igaware Version 10.1.3 Released

New in Version 10.1.4 [Wed Apr 30 2014]
=======================================

* New Features and Improvements *
– Outbound firewall – If port 1723 ( PPTP) is included in an Internet Access Policy, then IP protocol 47 ( GRE) will be added automatically.
– Added column ordering to Backup Restore file list.
– Updated xmlto to newest version.

* Fixes *
– Show fileserver shares that have been disabled in the past. The disabled were, previously, hidden.
– The Relaxed/ Strict outbound firewall mode for Multi-LAN operations. The mode can now be set independently.
– Fixed a problem that prevented the Network traffic graphs from disaplying properly.
– The System Status health check for the disk RAID status didn’t work properly for all disk configurations.
– Fixed Backup Destination to Share to allow a directory in the Share name.

More updates recently:

New in Version 10.1.3 [Fri Apr 10 2014]
=========================================

* New Features and Improvements *
– Updated the Zarafa Server to the newest version 7.1.9.
– Updated the libxml2 XML libraries to version 2.6.32 for Zarafa.
– Updated the libvmime MIME libraries to handle really old Outlook clients.
– Updated the Zarafa WebApp and WebAcess clients to the latest versions. WebApp is accessed via http://xxx/webapp, WebAccess via http://xxx/webaccess ( or /webmail).
– Installed new version of OpenVpn.
– Completed configuration changes and help for SSL VPN ( OpenVpn).
– The Network interface up script now calls commit-tables-iproute.php to create IPRoute tables on the fly.
– Added TCP/ UDP protocol selection to Access Controls=> Inbound Firewall=>Port Input.
– Specifying port 1723 for Port Input automatically opens access to TCP/IP Protocol 47.
– Changed the network traffic graphs to display network usage with a resolution of 1 minute instead of 5 minutes.

* Fixes *
– Squashed a small bug relating to firewall Destination Port Rules.
– Fixed the Spam Rules interface. The new version of Anti-Spam software broke it.
– Improved some help pages.
– Several other small fixes.

New in Version 10.1.2-1 [Tue Mar 25 2014]
=========================================

* New Features and Improvements *
– [ for 10.1.2-1 ] Many changes have been made to the Network Load balancing code base. All WAN lines will now fail-over automatically if one goes down.
– Upgraded the Anti-Virus software to the latest version.
– Upgraded the Anti-Spam software to the latest version.
– Added docm extension to the filename email filtering section.
– Added email postmaster options to allow a free hand entry of the postmaster address.
– WAN ISP selection – you now can’t use an existing ISP connection that’s active elsewhere.

* Fixes *
– Fixed a problem with email archiving.

New in Version 10.1.1-2 [Tue Mar 11 2014]
=========================================

* New Features and Improvements *
– [ for 10.1.1-2 ] Added the option “Enable SSL ( HTTPS) access to company webspace to the Web Server config page. If enabled, then, the Igaware Web config won’t listen on port 443 leaving it available for company webspace.
– [ for 10.1.1-2 ] The Zarafa softdelete is now run in a nightly batch instead of every hour. This reduces the load of large installations.
– The Email Server now listens on port 587 for local email submissions.
– Added an option to use MSA port 587 on the outbound SMTP relay host.
– Updated the Sendmail mail server to include TLS ( STARTTLS) support. This encrypts traffic between mail servers – keeps the NSA and GHCQ eyes off your mail traffic 🙂
– Forwarded email users now don’t get filtered by the Email Filter as the original recipient has already been filtered.
– Added a note to the Email Aliases page that email to an empty Alias User list is discarded.
– Modified the O/S exec system call to use select_stream() instead of feof(). The backup was blocking with feof() under rare circumstances.
– Email Aliases are now ordered alphabetically.
– Access Controls=> Outbound Firewall=> Individual Computers is now called LAN Devices.
– Changed method of update for Access Controls=> Outbound Firewall. Now a drop-down box is used to select Strict or Relaxed mode.
– Replaced the local Server Manual with a link to the on-line User Manual.

* Fixes *
– [ for 10.1.1-2 ] Small fix for network IP calculations.
– [ for 10.1.1-2 ] Small fix when adding a new ISP connection.
– [ for 10.1.1-2 ] Reduced the amount of output from the Rsync command during a Backup.
– [ for 10.1.1-2 ] Fixed a problem, when performing a backup to a Windows Share ( CIFS), introduced with last update.
– The Vacation message now accepts blank lines.
– Fixed a problem with the Ethernet routing tables. A table had been created for PPTP connections 🙂
– The Backup Restore now works, again, after changes were made to support disk encryption.
– Under some circumstances the “Stop Backup” button in Backup Now! did not stop all of the backup processes. This is fixed.
– The “Bypass transparent proxying” for selected networks was not working. This is fixed.
– The Internet Speed Test now works when testing the speed of an interface other than the default.

Posted in Linux Small Business Server, System Updates | Leave a comment

Outlook to Zarafa via SSL #Igaware #Zarafagroupware

If you are using outlook to connect to Zarafa you can now do this using port 237 and SSL.
Just update your Zarafa connection in Outlook:

zarafa-outlook-https

Posted in Linux Small Business Server, Zarafa | Tagged , | Leave a comment

#Igaware Version 10.1.0 [Sat Feb 08 2014] Released

New in Version 10.1.0 [Sat Feb 08 2014]
=========================================

* New Features and Improvements *

  • Added SSL support to the Zarafa server. This allows MAPI connections to use SSL on port 237.
  • Updated the SSL VPN server to the newest version.
  • Installed the SmokePing network monitor.
  • Updated rrdtool graphing software to newest version to allow Smoke Ping to work.
  • Updated the wget( http/ftp client) software to newest version for the Internet Speed Test facility.
  • Installed the Darkstat traffic monitoring software.
  • Updated the IRQ interrupt balancing software to the newest version.
  • The IP route tables are now created for all gateway network connections. This    is to allow the near future addition of network traffic shaping features.
  • Updated the kernel version.
  • Changed MaxConnectionsPerChild to 500 from 250 in httpd.conf
  • Modified the firewalling scripts to better block port 25 access from the LAN, when it’s requested.
  • Let’s support Network encryption for all Internet activities. The NSA/ GCHQ sucks big time.

* Fixes *

  • Fixed the IPSec VPN health monitor. The monitor was not checking if the IPSec
  • connection was up.
  • Changed the Web Server to use the prefork model. The previous Event model was using too much memory.
  • Fixed a problem with multi-LAN Web Filtering.
  • Disabled the Explicit Congestion Notification (ECN) network support. This was causing problems with packet loss in some cases.
  • Fixed a problem with WAN IP aliases where a new default network route would    sometimes be added.

Posted in Linux Small Business Server, System Updates | Leave a comment

#Igaware Version 10.0.1 [Tue Nov 18 2013 ] Released

New in Version 10.0.1 [Tue Nov 18 2013 ]
=========================================

* New Features and Improvements *

  • Added an Internet Speed Test option to the System=> Tools menu. This runs a speed test from the Server itself and gives a historical view of download and upload speeds.
  • Updated the POP3 and IMAP fetch software ( Fetchmail) to the newest version.
  • Removed network_reorder from rc.d/network – no longer required.
  • Updated the iproute2 package to the lastest version.
  • Installed a new command line Network Traffic monitor called iftop.
  • Altered some Sendmail MTA options. Changed privacy options and MinQueueAge to 30 mins from 5. This means that failed email transmission won’t be retried for 30 minutes.
  • Installed a new version of the Apache Web server ( from version 2.2.x to 2.4.x)
  • Installed latest PCRE regex libraries.
  • Installed lastest APR for Apache.
  • Re-compiled many programs to use the new PCRE library.
  • Updated the Email Recipient Address Versification software to the newest version.
  • Updated the Zarafa Server to version 7.1.7.
  • Updated the Anti-virus engine software to the newest version.
  • Added “SSL” option to the Email Internet Account pages. Thi allows retrieval of POP and IMAP email via SSL.

* Fixes *

  • Fixed a problem while writing the Zarafa database to a backup intended to store 7 days worth of data. The Zarafa Mysql database dump wasn’t named with the Day of week prefix.
  • Fixed a problem with the detection of USB disks, without a filesystem, during a Backup operation.
  • Fixed a rare problem with the Recipient Address Verification Email system.
  • Fixed an appointment invitee problem in Zarafa Version 7.
  • Fixed a problem during a backup to a Tape device.
  • Fixed – Log files for the console_health daemon and Zarafa Webaccess are now rotated every day.

Posted in System Updates | Tagged | Leave a comment

Igaware Linux Small Business Server – ‘A breath of fresh air’ (#Igaware #SmallBusinessServer #Zarafagroupware)

In 2001 Groves, an independent estate agent with 24 staff in three offices in the North East, made the decision to migrate away from their Microsoft server, to the Igaware Linux Small Business Server.

Nick Rawlinson, from Groves, explained, “We looked at various options, including upgrading our troublesome Microsoft server, but Igaware ‘s reputation for being robust and easy to use was very appealing.”

An Igaware Linux Small Business Server was installed at each of the three offices to deliver Internet security, file serving, and data backup.

At Groves head office, the Igaware Linux Small Business Server provides email serving and email filtering, with staff accessing email via web mail.

Nick told us, “In the twelve years we have been using Igaware, it has proven to be rock solid. Updates and upgrades are automatic so we have all the latest features and functionality as they are released.”

One new area of functionality Groves have started using is Zarafa Groupware, an Exchange alternative that is delivered as part of the Igaware Linux Small Business Server. Zarafa Groupware provides all the functionality of exchange, including active sync to allow smart phone synchronisation for email, calendars, contacts and tasks. Zarafa works directly with Outlook, but Groves have chosen to use the Zarafa web mail as it is more cost effective, less problematic, and more functional.

Nick told us, “Our office manager loves the system as it is so easy to use compared to other systems she is used to. The support we get is excellent, even receiving new features we’ve asked for. Igaware is a breath of fresh air compared to Microsoft.”

Tim Sexton from Igaware told us, “Had Groves gone down the Microsoft Small Business Server route they would have been on their third server by now, having spent tens of thousands of pounds, only to be told that Microsoft Small Business Server has been discontinued. The Igaware Linux Small Business server is the ideal alternative to Microsoft Small Business server for any business looking for a reliable, secure, and cost effective upgrade.”

Posted in Linux Small Business Server, Zarafa | Leave a comment

Probing network traffic with Ntop

The Ntop network traffic probe is built into the Igaware Linux Small Business Server.

To enable NTOP on your Igaware Linux Small Business Server, in the admin interface go to System=>Tools=>Ntop Server

Enable the server and set an admin user name and password, Click update and commit changes.

Once enabled you access Ntop through a web browser by visiting the following URL: http://[server]:3000 (replace [server] with the Igaware server’s LAN IP address.

Enjoy!

Posted in Hidden Gems, Linux Small Business Server | Tagged , , | Leave a comment

Igaware Email Archiving

The new Igaware Email Archiving system enables you to configure if and what emails are archived and where to. This is configured in the Igaware administration interface under Servers=>Email=>Email Archiving.

The system is incredibly flexible allowing you to create custom rules that determine precisely which emails are archived, and where they are archived.

As an example, the following:
Description     Action     Address     Dest Type     Dest Address
Incoming     To     *@bloggs.com     email     incoming@bloggs.com
Outgoing     from     *@bloggs.com     email     outgoing@bloggs.com

Would archive all email sent to the bloggs.com domain to incoming@bloggs.com. Emails sent to anyone at bloggs.com would be archived to outgoing@bloggs.com

Please Note: All rules are acted upon.

Posted in System Updates | Tagged , | Leave a comment

Version 9.4.5 released

A lot of new developments in recent weeks, including a new email archiving system which we’ll blog about in more detail very soon!

New in Version 9.4.5 [Thu Sept 12 2013 ]
=========================================

* New Features and Improvements *
– A new Email Archiving section has been released. This allows the user more control over Email Archiving.
– Added Not Dest IP to the destination port rule screen
– Added “Disable file versioning” to the File server ‘recycle bin’
configuration. This controls whether deleted files with the same name are stored as separate copies within the recycle bin.
– Updated the Zarafa database backup within the Mail volume. The Zarafa-dump database is now compressed on the destination media, to save space and network transfer time.
– Updated the Zarafa server to allow very long distribution lists.

* Fixes *
– FIXED the WAN IP aliases to use the correct netmask when calculating if the subnet is within range.
– Many small fixes and improvements.

New in Version 9.4.4 [Sat Aug 03 2013 ]
=========================================

* New Features and Improvements *
– Added Pyzor anti-spam checking to the Mail Scanner software.
– Updated the WAN PPPOE code to the newest version.

* Fixes *
– Shortened the delay for PPPOE watchdog script. If the PPPOE line goes down it will now restart the connection within 2 minutes.
– Fixed a problem where the Email Block list for recipients wasn’t working.
– Fixed a problem with the Web page blocking code.

New in Version 9.4.3 [Tue July 16 2013 ]
=========================================

* New Features and Improvements *
– Updated Linux Kernel to allow disk file system encryption.
– Added backup disk encryption. When enabled this will encrypt the USB external backup disk, making it impossible to view any files….
– Updated firewall iptables code to newest version.
– Changed file system mount options to include realtime option.

* Fixes *
– Temporarily turned off TNEF decoding in Mail Scanner until new TNEF encoder is fully tested.
– Updated the TNEF encoder for mail scanning.
– Fixed Custom Date feature for Web Visit Activity Reporting.
– Fixed transparent proxy of a machine when the default machine is set to transparently proxy and “unrestricted firewall mode is on.
– Set KAM_COUK score to 0.0 in Mail Spam filtering code.
– Adjusted sleep time in PPPOE watchdog.
– Adjusted sleep time in Console Health daemon. During a boot-up the Console Health daemon would kick-in too soon.

New in Version 9.4.2-6 [Thu May 30 2013 ]
=========================================

* New Features and Improvements *
– Added ADS groups to the user Group list when setting a File server Share group ownership.

* Fixes *
– Fixed a problem when specifying a Backup Source Share. It was not possible to enter a Windows username with slashes present.
– Downgraded Zarafa libvmime to version 7.0.5. This is to fix a problem with corrupted PDF attachments.

Posted in System Updates | Leave a comment

Small Business Server Reseller Recruitment

Following Microsoft’s announcement to ditch their Small Business Server, Igaware has stepped up their reseller recruitment drive, targeting Small Business Server resellers who have had the rug pulled from underneath them.

The Igaware Small Business Server provides a direct upgrade from Microsoft Small Business Server, delivering everything a business needs in a single robust, secure server. The Igaware Small Business Server not only gives businesses a more affordable and robust solution, but it also delivers better margins to resellers, meaning greater customer service.

Small Business Server

Small Business Server

Posted in Linux Small Business Server, Uncategorized | Leave a comment