Hallo,

MDaemon developer publish Critical Update MD041823 sore ini.

https://mdaemon.com/pages/downloads-critical-updates

Update ini mencakup 2 hal utama:

- Menghapus Cyren AV dan Cyren Outbreak Protection menggantinya dengan Ikarus 
AV.

- bug fixed "Vulnerabilities for Denial of Service (DOS) and Cross-Site Request Forgery (CSRF)".

Bagi yang run Windows Firewall dan Windows Antivirus di server MDaemon, maka perlu memasukkan task/service

\\mdaemon\securityplus\Ikarus\scan.server\bin\scanserver_w64.exe

dan

\\mdaemon\securityplus\Ikarus\scan.server\bin\scupdate_w64.exe


kedalam "allow apps or features through
windows firewall" di Windows Defender Firewall dan "Process exclusions" di Windows Defender Antivirus.

https://www.mail-archive.com/[email protected]/msg47689.html

Rekomendasi AV scanning yang diaktifkan: keduanya.

http://mdaemon.dutaint.co.id/mdaemon/23.0.1/antivirus.html

Virus Scanning Engines

[x] Use the ClamAV engine to scan messages

[x] Use the IKARUS Anti-Virus engine to scan messages

--
syafril
--------
Syafril Hermansyah

MDaemon-L Moderator, run MDaemon 23.0.1 release
Mohon tidak kirim private mail (atau cc:) untuk masalah MDaemon.

Org yg bijaksana adalah yang mengetahui sejauh mana dia bisa pergi terlalu jauh
        -- Jean Cocteau, born 1891


--- Begin Message ---
MDaemon-Technologies_logo_large 
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88f3pdr7V1-WJV7CgP0WVYXklb6kPykvW3qYtwQ71z6ZQW6zC5kk8CLZ0gW86B4Gd2YGBCFW1ycxyn8tFqypW17JL9F4tpV5lW5rn-Q251_KKsW8KCvq38ymtj1W3j-Zjw8srGRnW8y6tvX7gbGM7W4CYSw87KPsCXW8pTDYC1mckBhW5ZP7F16lYTrBW7kC0Q_8P3qvsW1bh7YF2FMVj8W4sx7hd6P6xz6W7nHCBq3PYKzGTbH4b7rvrY-W6Zvm9C4wTJbwV8BSxR6F_W8MN6xhNJn7fwm8W2zHHxF5ZRChQ3nMN1
 )

Software Critical Update Notification



Hello Syafril,



Action Required

We have released a Critical Update that affects versions 18. x.x through 23. 
x.x of MDaemon Email Server software and version 9. x.x of SecurityGateway for 
Email software version 9. x.x.

1. New Malware Detection (antivirus) Engine for MDaemon Antivirus

The Cyren Malware Detection (antivirus engine) has been replaced and Cyren's 
proprietary Recurrent Pattern Detection/Outbreak Protection service has been 
removed (no longer available). This update adds a new Malware Detection 
(antivirus engine) to the MDaemon Antivirus feature in the MDaemon email server 
and SecurityGateway software.

2. Vulnerabilities for Denial of Service (DOS) and Cross-Site Request Forgery 
(CSRF)

The MDaemon Development Team has built and tested a patch to correct a 
potential vulnerability in MDaemon Email Server and Webmail (Worldclient). This 
vulnerability may impact all browser types.

Simply download and install the appropriate patch listed on the Critical Update 
page 
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88S3pdrLV1-WJV7CgCM_W8BHDQ61qmzhWW5xCQtQ33Zb-XW693SJk2Gd5YzW5RdrH66x7nHkW55vJ4D4CnMcQV_Qj4Q6s4GMmN8RKBZRRKm9cW2rgzx087FRmJW862mNK8j2T7_W55HjkZ9lXgpGN5-kBpy_lpXxW4Vwvh62kzh6RW1QQ7zK5MNZ27W3ftgKy5jlqC1W15YG3-4ccG3JW7NLYw42R9H45W42gYzx24m54zW6JMZTT9hNZx9W8Qmm_05P4LMbW4Kfy9881BSkVW82GCDh2cdp85W5GBLnW5zPm3LW94YV4y8mT12-W1LJFSv1FPjhyW32X-ZG4zQGdxW74C5328N7mJJ3lJ31
 ) .  There is no requirement to renew your license to obtain the update. 
However, users of earlier, unsupported versions of MDaemon are also encouraged 
to upgrade to the latest version to ensure they have the latest product and 
security features.

Additional questions can be answered by contacting the Support Team.

Thank you,

Kevin Beatty

Vice President, MDaemon Technologies

[email protected] (mailto:[email protected])

+1 (817) 601-3222 ext. 214

MDaemon Security Patch
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88S3pdrLV1-WJV7CgCM_W8BHDQ61qmzhWW5xCQtQ33Zb-XW693SJk2Gd5YzW5RdrH66x7nHkW55vJ4D4CnMcQV_Qj4Q6s4GMmN8RKBZRRKm9cW2rgzx087FRmJW862mNK8j2T7_W55HjkZ9lXgpGN5-kBpy_lpXxW4Vwvh62kzh6RW1QQ7zK5MNZ27W3ftgKy5jlqC1W15YG3-4ccG3JW7NLYw42R9H45W42gYzx24m54zW6JMZTT9hNZx9W8Qmm_05P4LMbW4Kfy9881BSkVW82GCDh2cdp85W5GBLnW5zPm3LW94YV4y8mT12-W1LJFSv1FPjhyW32X-ZG4zQGdxW74C5328N7mJJ3lJ31
 )

Contact Support
(https://email.mdaemon.com/e3t/Ctc/ZT+113/cNM0K04/VWXQ2N8gTvV5W5mbkTF80fBz6W5j5c_V4ZwylcN3Lg88y3pdrrV1-WJV7CgJnLW1TT8hV8L4fdCW113T-m8ks2wzW5MrfQZ6N6w5pVbCp5f96M-pBVNp8nZ9g3LsLW70tZcq1fB4dbW7HHbQr5g2JQyW82cNTP2lgcHhV4bvfz5VYt2CW8kcplj7B6TVZVzfy8P52GY4BVJmKRx76_1-dV_0DZz3hCVskW7bjz2k5ZL4tFW8N0jFv8b10PzW91zmxh5q-WhjW1vk7v62fPMJDW2wg2Lv4Tv15WW5znw6h7fxb5NW7GVLD33m29lGW3NHN-n3P_8yVW70Z4BX8bBn3bW3zJk9B3jyX93W65F1rR7-Dbg_35pl1
 )

MDaemon Technologies, 4550 State Hwy 360, Suite 100, Grapevine, TX 76051, US, 
+1.817.601.3222

Manage preferences 
(https://email.mdaemon.com/hs/manage-preferences/unsubscribe?languagePreference=en&d=VndZ6g5t5N5sVPkxQL3M7lKsW2m2N_F3zbVmKW1JxwWY3SZ1tLW81hMK617f7hvW5kQwgC6vYcCJW5j5GY25fRPGfN6Wq5pt28X8lN7wMfrYGKd_PV20N842Thg0pVWbqYV1hB73cF2QGg7Q4r-d1&v=3&_hsenc=p2ANqtz-81ppYU23YtTuDiRaqqWjyA3kJj1iq3bmsOV7nq7aN6nJ-5KfLaAxCtZlSyDmweg2o5D6qEVl5wO8R8xVGrldyFRFYsyg&_hsmi=254655744
 )

--- End Message ---

Attachment: OpenPGP_0xA5E5117522155320.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Kirim email ke