{"id":388,"date":"2017-02-27T10:23:53","date_gmt":"2017-02-27T09:23:53","guid":{"rendered":"http:\/\/www.igaware.com\/blog\/?p=388"},"modified":"2017-02-27T10:23:53","modified_gmt":"2017-02-27T09:23:53","slug":"igaware-version-13-2-10-released-igaware-linuxsbs","status":"publish","type":"post","link":"https:\/\/www.igaware.com\/blog\/igaware-version-13-2-10-released-igaware-linuxsbs\/","title":{"rendered":"Igaware Version 13.2.10 released #Igaware #linuxsbs"},"content":{"rendered":"<p>New in Version 13.2.10 [ Feb 23 2017]<br \/>\n======================================<\/p>\n<p>* New Features and Improvements *<\/p>\n<ul>\n<li>Updated the kernel to version 4.4.36-64<\/li>\n<li>Installed fail2ban to block remote access from persistent &#8220;script kiddies&#8221;.<\/li>\n<li>Updated the Zarafa system to the latest version of 7.2.5. This fixes a memory leak that slowed the server down over several weeks.<\/li>\n<li>Re-compiled Zarafa 7.2 with new Gsoap, tcmalloc and vmime libraries. This removes a memory leak.<\/li>\n<li>Major update for PHP software to v5.5 from v5.3<\/li>\n<li>Added &#8220;Don&#8217;t allow insecure plain-text login for POP or IMAP&#8221; option for Zarafa IMAP\/ POP.<\/li>\n<li>Added a &#8220;RELAY:&#8221; option to the &#8220;SMTP Relay&#8221; page for the user entered domain list. The &#8220;Relay&#8221; host will be able to relay through the mail server. This will never normally be required.<\/li>\n<li>Updated the tcpdump program ( network packet tracing) to the latest version.<\/li>\n<li>Updated the libpcap network libraries.<\/li>\n<li>Added a charset alias for glibc iconv. \/usr\/lib\/gconv\/gconv-modules &#8211; added &#8220;alias KS_C_5601-1987\/\/ EUC-KR\/\/&#8221;. This is to handle Korean character sets in MIME Email.<\/li>\n<li>Removed the libiconv libraries. Was causing confusion and is not required &#8211; support is in glibc.<\/li>\n<li>Recompiled all binaries relying on the old libiconv libraries &#8211; rsync,<br \/>\nclamav, lm_sensors, Zarafa.<\/li>\n<li>Updated the hard disk untility program &#8211; hdparm &#8211; to the latest version.<\/li>\n<li>Re-compiled gperf-tools ( tcmalloc) to create new .la ( libtool linker) files. To reference new compiler libstd++ file location<\/li>\n<li>Added a &#8220;within subnet&#8221; sanity check to the WAN gateway address.<\/li>\n<li>Updated the &#8220;checkin&#8221; web page with the real hardware product data, up-time and RAM information.<\/li>\n<li>Updated the hardware sensors ( for temperature and fan speed). Installed IPMITOOLS for sensors.<\/li>\n<li>Updated Zarafa Search with a new configuration file.<\/li>\n<li>Modified &#8220;default email domain&#8221; in Email=&gt; General to include forwarded domains.<\/li>\n<li>Installed new self-signed SSL certificates for sendmail . You should use the letsencrypt certificates, if possible.<\/li>\n<li>Updated the FTP server software.<\/li>\n<li>Updated the IMAP\/POP email server software.<\/li>\n<li>Updated the Fing network scanning software to v3.0<\/li>\n<li>Update the Z-Push active-sync software to v2.3<\/li>\n<li>Updated the cifs-utils software used to mount remote SMB shares for backup.(mount.cifs)<\/li>\n<li>The incoming SMTP mail server now also listens on port 587.<\/li>\n<li>Updated the Nmap network scaning software to v7.<\/li>\n<li>Updated System_Daemon php scripts<\/li>\n<li>Changed default dhcp lease time to 3 days from 1 month<\/li>\n<li>Updated the DHCP server software to the latest version.<\/li>\n<li>Removed root user access for FTP server.<\/li>\n<\/ul>\n<p>* Fixes *<\/p>\n<ul>\n<li>Fixed ifup-aliases. Now ignores the main WAN ip and does not duplicate it.<\/li>\n<li>Fixed Zarafa for Korean charset display problem.<\/li>\n<li>Patched the GSOAP libraries with Zarafa patches ( memory leak) . Compiled as shared libraries. Looks like previously it was static.<\/li>\n<li>Fixed some console system status health scripts. Now stores time of last fail. Reboot status now shows all reboots in history.<\/li>\n<li>Brain-dead Zarafa servers issue a kill(0,) which sends a kill to all process group members. Kills init.d script and affects console_health. Added trap &#8221;SIGTERM to init.d script for Zarafa.<\/li>\n<li>Removed the loading of SIP VOIP helper modules on all machines. (rmmod siphelper modules in rsyncittemp)<\/li>\n<li>Fixed the email alias user list for file share access. For ADS users use the sAMAccountName as the key for write-read access list.<\/li>\n<li>Changed the sendmail MTA CA certificate bundle to ca-bundle ( STARTLS can now verify incoming SSL connections)<\/li>\n<li>NOTE: ASMedia Technology Inc. ASM1083\/1085 PCIe to PCI Bridge causes lost interrupt and poll mode for bad performance !!!<\/li>\n<li>Make sure that the Realtek r8168 driver is installed if the card is a 8168<br \/>\nchipset. The Linux default r8169 will not work at gigabit speeds !!<\/li>\n<li>DHCP server config &#8211; don&#8217;t allow &#8220;\/&#8221; in machine names.<\/li>\n<li>Fixed display issues with &#8220;Lan Devices&#8221; pages. Did not remember interfaces<br \/>\noption and defaulted back to LAN if LAN2 was selected.<\/li>\n<li>Enabled LOOSE_PROVISIONING for Z-push ( active-sync). Android update requires it.<\/li>\n<li>Permissions and owner of mail spool file are now checked and set for users.<\/li>\n<li>Fixed a problem with Zarafa Out of Office.<\/li>\n<\/ul>\n<p>New in Version 13.2.10-pre20 [ Jan 21 2017]<br \/>\n============================================<\/p>\n<p>* New Features and Improvements *<\/p>\n<ul>\n<li>Updated the &#8220;Powered Off&#8221; System Status monitor. All reboots are now recorded properly and available on the System Status and System Check-in Pages.<\/li>\n<li>Added an option to the IPSec connection screen to allow the definition of the Source WAN IP address.<\/li>\n<li>Updated the iSCSI SCST mods and progs to latest version to support kernel version 4.<\/li>\n<li>Updated the hardware sensors config files.<\/li>\n<li>All devices will update to the new Linux Kernel version on next reboot.<\/li>\n<li>Installed the latest CA SSL certificates.<\/li>\n<li>Added a menu option to create free SSL certificates from letsencrypt.org for the Igaware server. This will automatically create and install trusted SSL certificates for HTTP, IMAP\/POP, SMTP STARTLS and Zarafa IMAP\/POP. Menu option is at System =&gt; SSL Certificates. This is BETA.<\/li>\n<li>Added Explicit Congestion Notification (ECN) for TCP network connections when requested by incoming connections.<\/li>\n<li>Email Filtering &#8211; Blocked WordPress email exploits.<\/li>\n<li>Installed the latest version of irqbalance. This distributes interrupt requests between processors.<\/li>\n<li>The &#8220;Scan LAN Network&#8221; device discovery feature has been completely re-written. Five different methods are now used to discover devices on the network. New options are provided to deal with network discoveries. Give it a whirl.<\/li>\n<li>The DHCP server now makes sure that static DHCP leases &#8211; those devices listed on the &#8220;LAN Devices&#8221; pageare not handed out to other devices. Previously, if a device did not respond to a PING echo request, then it&#8217;s lease could be handed out to another device. This can not happen now. Also, if a device is deleted from the &#8220;LAN Devices&#8221; page, the DHCP lease is removed from the lease file.<\/li>\n<\/ul>\n<p>* Fixes *<\/p>\n<ul>\n<li>The ISCSI subsystem was not shuting down on reboot.<\/li>\n<li>IP alias now ignores the main WAN IP address and does not duplicate it.<\/li>\n<li>Fixed a problem with email routing based on sender address( smarttable)<\/li>\n<li>Fixed a problem with the Zarafa IMAP SSL certificates.<\/li>\n<li>Fixed some bugs with the new letsencrypt.org SSL certificate install.<\/li>\n<li>Fixed permission issues with SSL certificate install.<\/li>\n<li>Several USB disks were not detected properly with the new kernel running. Loaded the UAS ( USB Attached storage) kernel module.<\/li>\n<li>Installed a new Linux kernel version 4.4.36. This fixes a rare CPU lockup problem.<\/li>\n<li>Small bug fixes with letsencrypt SSL certificates for sendmail.<\/li>\n<li>Added fullchain SSL certificate to mail server.<\/li>\n<li>Various small bug fixes.<\/li>\n<\/ul>\n<p>New in Version 13.2.9 [ Nov 16 2016]<br \/>\n=====================================<\/p>\n<p>* New Features and Improvements *<\/p>\n<ul>\n<li>Added an option to change the destination port to 2525 for Email Recipient Address Verification. Microsoft Exchange &gt; 2013 requires this. Please read the on-line help for this option to explain how to set up MS Exchange for this.<\/li>\n<li>Updated the libboost libraries to v1.49 for Zarafa.<\/li>\n<li>Loaded new CPU microcode for buggy Intel processors.<\/li>\n<li>Updated identiy files for PCI and USB devices.<\/li>\n<li>Installed a new version of cifs-utils. This allows mounting of remote Windows Shares. ( mount.cifs)<\/li>\n<\/ul>\n<p>* Fixes *<\/p>\n<ul>\n<li>The Anti-Virus daemon is now not reloaded if there have been no changes to the AV signature database. This caused problems if the database reload took too long.<\/li>\n<li>Removed a race condition if the AV database was reloaded and the Mail Scanner detected that the AV server was not responding in time.<\/li>\n<li>Removed the Samba winbind seperator from smb.conf. Did not work &#8211; removing the definition does work and gives &#8216;\\&#8217; as the seperator.<\/li>\n<li>Fixed the username authentication for the SSL VPN server. ( patch has been temporarily removed)<\/li>\n<li>Patched kernel to stop a spinlock problem. ( in af_unix.c)<\/li>\n<li>Fixed a problem with the DHCP server config file. Machine names with a : character would stop the DHCP server. (dhcpd.conf. Removed : &amp; ) from machine names)<\/li>\n<\/ul>\n<p>New in Version 13.2.8 [ Oct 13 2016]<br \/>\n=====================================<\/p>\n<p>* New Features and Improvements *<\/p>\n<ul>\n<li>Added several new Anti-Spam rules to filter out the new Porn related Spam.<\/li>\n<li>The Desktop vacation shortcut now authenticates with AD users.<\/li>\n<li>Fileserver shares can now easily be moved to a different RAID disk pair. Previously, this was difficult to implement.<\/li>\n<li>Installed the latest RAID disk untility &#8211; mdadm v3.4<\/li>\n<li>The Zarafa Server memory cache is now perioicaly cleared down to improve performance.<\/li>\n<\/ul>\n<p>* Fixes *<\/p>\n<ul>\n<li>New Zarafa libraries caused the web server to stop responding.<\/li>\n<li>Fixed location of netlogon and sysvol shares for the AD Server.<\/li>\n<li>Squashed bugs in the Email &#8220;vacation&#8221; desktop shortcut.<\/li>\n<li>Fixed the email vacation &#8220;reply to&#8221; address when the recipient user is an AD user.<\/li>\n<li>Fixed the backup catalog listing. The \/home\/zarafa\/ directory was being traversed for no reason.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>New in Version 13.2.10 [ Feb 23 2017] ====================================== * New Features and Improvements * Updated the kernel to version 4.4.36-64 Installed fail2ban to block remote access from persistent &#8220;script kiddies&#8221;. Updated the Zarafa system to the latest version of &hellip; <a href=\"https:\/\/www.igaware.com\/blog\/igaware-version-13-2-10-released-igaware-linuxsbs\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[4,13],"tags":[],"class_list":["post-388","post","type-post","status-publish","format-standard","hentry","category-linux-small-business-server","category-system-updates"],"jetpack_featured_media_url":"","jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/p3QVqI-6g","_links":{"self":[{"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/posts\/388","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/comments?post=388"}],"version-history":[{"count":1,"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/posts\/388\/revisions"}],"predecessor-version":[{"id":389,"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/posts\/388\/revisions\/389"}],"wp:attachment":[{"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/media?parent=388"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/categories?post=388"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.igaware.com\/blog\/wp-json\/wp\/v2\/tags?post=388"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}