<<<>>> Trend Micro, Inc. February 04, 2008 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail(TM) for Domino(TM) for Linux(TM) Version 3.1, build 1032 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Notes: This readme file was current as of the date above. However, all customers are advised to check Trend Micro's Web site for documentation updates at: http://www.trendmicro.com/download/ Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro Web site. Register during installation, or online at: https://olr.trendmicro.com/registration/ Contents =================================================================== 1. About ScanMail for Domino 2. What's New 3. Documentation Set 4. System Requirements 5. Installation 5.1 Pre-installation Tasks 5.2 ScanMail Installation 5.3 ScanMail for Domino and Other Antivirus Products 5.4 Using Trend Micro Control Manager to Manage ScanMail 5.5 Removing ScanMail 6. Post-installation Configuration 7. Known Issues 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreement =================================================================== 1. About ScanMail for Domino ======================================================================== Trend Micro ScanMail for Domino works in real time to prevent viruses, malicious code, and unwanted content from entering your Domino environment via mail, replication, or infected documents. Malware scanning is performed in memory, which significantly increases the scanning speed. ScanMail offers flexible, scalable configuration and remote management through the Notes workspace, as well as Web access of ScanMail databases. ScanMail is fully compatible with Trend Micro Control Manager(TM), Trend Micro's centralized management console that lets you consolidate the antivirus and content security protection into a cohesive solution. 2. What's New ======================================================================== ScanMail for Domino 3.1 provides the same features and benefits provided with version 3.0. Version 3.1, however, provides support for the following Lotus(TM) Domino(TM) versions and Linux(TM) distributions: - Lotus Domino 7.0.2 and later - Lotus Domino 8.0 and later - Red Hat(TM) Enterprise Linux 4 and 5 - SUSE Linux Enterprise Server 9 and 10 2.1 What's New in 3.0 ===================================================================== ScanMail for Domino represents a significant advancement in antivirus protection and content security for Domino environments. Configuration improvements in version 3.0 make ScanMail more flexible and scalable than ever before. The following new features are available in version 3.0: - Supports automated (silent) installation - Supports upgrades to 3.x versions without Domino server downtime - Policy-based configuration - Customizable anti-spam engine - New advanced scanning options - Delay or Redirect action for messages that match a Scan Options setting - Tags to customize notification - Support for cluster server trusting - Improved statistics and new chart format - Supports Trend Micro Control Manager(TM) 3.0 Standard or Enterprise edition - Prevention of virus and other malware outbreaks using Outbreak Prevention Service (OPS) with Control Manager 3.0 - New debug levels for detailed ScanMail task debugging - Support for Trend Micro Online Registration system 3. Documentation Set ======================================================================== In addition to this readme.txt, the documentation set for this product includes the following: - Administrator's Guide -- product overview, installation planning, installation and configuration instructions, and basic information intended to get you "up and running." Electronic versions of the printed manuals are available at: http://www.trendmicro.com/download/ - Help Database -- help accessible via the Notes Client that provide guidance for performing a task. - Knowledge Base -- a searchable database of known product issues, including specific problem-solving and troubleshooting topics. http://kb.trendmicro.com/solutions/ 4. System Requirements ======================================================================== ScanMail for Domino requires the following hardware and software specifications on the servers where it is installed: Lotus Domino (one of the following versions) ===================================================================== - Lotus Domino 7.0.2 or later - Lotus Domino 8.0 or later Linux (one of the following distributions) ===================================================================== - Red Hat(TM) Enterprise Linux 4 or 5 - SUSE Linux Enterprise Server 9 or 10 - Install libstdc++.so.6 Hardware ===================================================================== - Intel(TM) Pentium(TM) IV Processor 1.3GHz or higher - 256MB of memory (512MB recommended) - 125MB available disk space for program files (150MB recommended) 285MB for temporary files (300MB recommended) 50MB available disk space on each Domino server partition (60MB recommended) Connectivity ===================================================================== - Internet access (for component downloads) 5. Installation ======================================================================== This section explains key steps for installing ScanMail for the first time or upgrading from previous ScanMail releases. Refer to the Administrator's Guide for detailed installation, upgrade, and migration information. 5.1 Pre-installation Tasks ===================================================================== Perform the following tasks before installing ScanMail: - Log on as the root user - Determine the notes.ini location(s) (including its location on partitioned servers, if applicable) - Check that the Notes ID used to manage ScanMail databases exists - Check the available disk space by issuing df -k The / mount point should have at least 400MB free. - Close any opened Notes Client - Close any opened Notes account session NOTE: Perform this step when installing ScanMail 3.1 for the first time. - Shutdown the Domino server before: - Installing ScanMail 3.1 for the first time - Removing ScanMail 3.1 - Check whether the library libstdc++.so.6 exist in system - command is: rpm -qf /usr/lib/libstdc++.so.6 - please apply related package if it doesn't exist. Usually the package name is libstdc++* or compat-libstdc++-* NOTE: You can automatically upgrade from ScanMail 3.1 to a newer 3.x build without shutting down the Domino server. 5.2 ScanMail Installation ===================================================================== Once you have verified that the Linux server is ready, install the ScanMail program files and setup the ScanMail databases. NOTE: You can run the ScanMail Setup using the Wizard or Silent installation. However, you need to run a Wizard or Silent installation from a graphical desktop environment (for example, KDE). Refer to the ScanMail Administrator's Guide for details. To install ScanMail for Domino on a Linux server from the Shell console: 1) Do one of the following to navigate to the Setup binary (SMD3SetupLinux.bin): - If you have the Trend Micro Enterprise Protection CD, mount the CD and then change to the ScanMail for Domino folder - If you downloaded the software from the Trend Micro Web site, navigate to the relevant folder on your server 2) Type "./SMD3SetupLinux.bin -console" to launch the console- based installation. The ScanMail server Setup launches and the Welcome screen appears. 3) On the License Agreement screen, press ENTER or type "q" to skip reading the ScanMail for Domino License Agreement. 4) If you do not agree with the terms of the license, type "2" to select "I do not accept the terms of the license agreement", and then cancel the ScanMail Setup. Otherwise, type "1" to select "I accept the terms of the license agreement". 5) If the server has no existing ScanMail 3.x installation, Setup will skip the Existing Setup Options screen and directly proceed to the Product Activation screen. Otherwise, if the target server has existing ScanMail 3.x installation, Setup will display the Existing Setup Options screen. - On the Existing Setup Options screen, the available setup options are displayed Select an option or proceed to the next screen. See the Administrator's Guide "Setup Options" topic for details. - On the Product Activation screen, you may enter an Activation Code to activate ScanMail or skip this screen and activate later using the Configuration Database Do one of the following: - If you have not registered ScanMail: Go the Trend Micro Product Registration Web site (https://olr.trendmicro.com/registration) and follow the on-screen instructions to register your product. Register your product to ensure eligibility to receive the latest security updates and other product and maintenance services. After completing the registration, Trend Micro sends a ScanMail Activation Code (AC) to the email address specified in the Registration Profile. Use this Activation Code to activate ScanMail. - If you have an Activation Code: Type the Activation Code for ScanMail. To use the full functionality of ScanMail 3.1, obtain a ScanMail Full or Suite Activation Code, and then activate the software. - If you do not have a Registration Key nor an Activation Code, or you want to activate later: Skip this screen. Setup will install ScanMail. However, the ScanMail scan or update task will not load. Activate ScanMail immediately after installation to start the Domino environment protection. 6) On the Domino Server screen, Setup lists the existing ScanMail installation. Do one of the following: - Type "1" to select "Add" and specify the target server's notes.ini where ScanMail should be installed (for example, /lotus/notesdata2/notes.ini) - Type "2" to select "Remove" and delete a server from the list NOTE: If you have a partitioned servers, install ScanMail on each partition you want to protect. 7) On the Domino Server Binary and Data Directories screen, select the index number of the available options to modify the Domino binary or Domino Data path. Setup analyses the target server(s). It checks for installed ScanMail information and displays the result. Setup will perform an upgrade on target server(s) with existing ScanMail 3.1 version. Alternatively, it will perform fresh ScanMail installation on target server(s) without ScanMail installed. 8) On the Database Replication Settings screen, select the ScanMail databases that Setup will enable for replication. Except for the Quarantine Database, Setup will enable the replication of all ScanMail databases by default. If there are server(s) with ScanMail installed and the Configuration Database is being replicated, you may skip this screen on subsequent installations. NOTE: Remember to schedule the replication of the Configuration Database after installing ScanMail to receive the default policy. 9) On the Default Policy Selection, type the index number to select or deselect the server(s) that should get the ScanMail default policy. IMPORTANT: A single ScanMail server, central (hub), or first server from a group of partitioned servers should get the default policy. 10) On the ScanMail Administrator screen, do one of the following: - Type the administrator account that will have Manager access to all ScanMail databases (for example, notes_admin) - Otherwise, if the target server(s) are partitioned server(s) and you have different administrator groups for each partition, specify a different user or user group for each partitioned server and then type the administrator account for each server 11) On the ScanMail Database Signing screen, do one of the following: - Type "2" to select "Skip database signing" and postpone the ScanMail database signing Sign ScanMail databases manually after the installation. Refer to "Sign ScanMail databases with a different ID" ScanMail Administrator's Guide topic for instructions. - Type "3" to select "Use single ID file for all target servers" and sign the ScanMail databases with a single ID Type the ID (including its full path) and password. - Type "4" to select "Specify different ID for each target server/partition" and sign the ScanMail databases on each partition with a different ID Type the ID (including its full path) and password. Setup copies the ScanMail components to the target server(s). 12) After completing the installation, press ENTER to exit Setup. Check if ScanMail is successfully installed by sending an email with a test virus, such as the EICAR test file. Refer to the "Post-installation Configuration" for a list of recommended post-installation configuration. 5.3 ScanMail for Domino and Other Antivirus Products ===================================================================== If you are running Trend Micro ServerProtect or other antivirus product on the Domino server where you will install ScanMail, exclude from scanning ScanMail's "smd" and temporary directories on each partition (see the Administrator's Guide- "Set temporary directories" topic for details). Otherwise, a scanning conflict can occur. Refer to the ServerProtect documentation for instructions to exclude Domino folders and directories from scanning. 5.4 Using Trend Micro Control Manager to Manage ScanMail ===================================================================== To manage ScanMail from a Control Manager management console, you must have any the following releases applied on the Control Manager server: - Control Manager 3.0, Service Pack 1, hot fix 2012 (or newer) 5.5 Removing ScanMail ===================================================================== Before removing ScanMail: - Confirm that the Domino server and client are not running; shut down the Domino server and client if they are running - If you installed the Control Manager agent for ScanMail, uninstall it first before removing ScanMail NOTE: This section will only provide instructions on how to automatically remove ScanMail by running a console-based uninstallation. Refer to the ScanMail for Domino Administrator's Guide section "Removing ScanMail" for details on how to automatically and manually remove ScanMail. To run an automatic ScanMail uninstallation from the command console (terminal or Shell console): a. From the directory containing the ScanMail uninstall binary (typically, /opt/trend/SMD/Uninstall), issue the following command: # ./SMDUninstallerLinux.bin -console b. Type 1 to uninstall ScanMail. c. If there are multiple ScanMail installation present, type the index number to select the server where ScanMail will be removed. d. Type 3 to exit Setup. Setup removes ScanMail. NOTE: If the ScanMail Icons on the Notes Workspace still appear after uninstallation, right-click each icon and then select "Remove From Workspace" from the menu that appears. In addition, you can remove the ScanMail entries (for example, ScanMailInstallPath) in the notes.ini file manually (refer to the Administrator's Guide for instructions). 6. Post-installation Configuration ======================================================================== After successfully installing ScanMail, Trend Micro recommends performing the following post-installation configuration steps: NOTE: Refer to the ScanMail Administrator's Guide "Getting Started with ScanMail" chapter for detailed steps. 1) Register and activate ScanMail. NOTE: Skip this step if you have already activated ScanMail during installation. 2) Start the Domino server. Start the Domino server to load the ScanMail scan tasks. 3) Test installation with EICAR. Trend Micro recommends testing ScanMail and confirming that it works by using the EICAR test file. 4) Update components manually. Use the Configuration Database to run on-demand antivirus and content security products update. 5) Scan databases manually. Use the Configuration Database to run manual database scanning. 7. Known Issues ======================================================================== Here are the known issues for this release: 7.1 Cluster Trusting cannot be disabled. ===================================================================== In a Cluster Trusting setting, a policy applied to servers in a cluster group (servers listed under "In This Policy"), cannot be disabled. 7.2 The Top 10 charts cannot be displayed. ===================================================================== The Log Database > Statistics > Top 10 Charts sometimes cannot be displayed. As a workaround, close and re-open the Log Database, and then refresh the Top 10 Charts view. 7.3 The roles set in the Access Control List (ACL) for ScanMail databases do not take effect. ===================================================================== In some instances, the roles set for ScanMail databases do not take effect. As a workaround, modify the roles set by using Notes Administrator or Notes Client > ACL window. Refer to the "Defining Access and Roles to ScanMail Databases" topic in the Administrator's Guide for the list of recommended access level and applicable roles. 7.4 The account managing the ScanMail databases acquires the Manager access and all roles by default. ===================================================================== The account managing the ScanMail databases, which is specified during Setup, acquires the Manager access and roles regardless of the actual ACL setting. 7.5 When using a Web browser to access the ScanMail Configuration Database (smconf.nsf), an exception error appears. ===================================================================== Accessing ScanMail databases installed on a Domino R5.x server from a Web browser generates the following exception error: "Agent 'QueryOpenAbout' error: Object variable not set" 7.6 An Outbreak Prevention Policy (OPP) or Content Filter rule is unable to filter keywords in *.eml files attached in an SMTP message. ===================================================================== Keywords in *.eml attachments, which are typically Outlook Express email message files, on SMTP messages cannot be filtered by the Content Filter or the OPP. 8. Release History ======================================================================== Previous releases include the following: ScanMail for Lotus Notes 2.6 December 17, 2002 ScanMail for Lotus Notes 2.6 Patch 1 June 16, 2003 ScanMail for Lotus Notes 2.6 Service Pack 1 January 04, 2004 ScanMail for Domino 3.0 September 23, 2004 9. Contact Information ======================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.trendmicro.com Evaluation copies of Trend Micro products can be downloaded from our Web site. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 10. About Trend Micro ======================================================================== Trend Micro, Inc. provides centrally controlled server-based virus protection and content-filtering products and services. By protecting information that flows through Internet gateways, email servers, and file servers, Trend Micro allows companies worldwide to stop viruses and other malicious code from a central point before they can reach the desktop. Copyright 2007, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, Control Manager, and ScanMail are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreement ======================================================================== Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide