Version 6.1

Introduction Installation SysAdmin Network Objects Storage E-mail Real-Time Access Services Directory Clusters Applications Miscellaneous Licensing   WebMail Pronto! PBX

Introduction Features History How To Help Me Version 6.1 Revision History 6.2 6.1: Summary 6.0 5.4 5.3 5.2 5.1 5.0 4.x 3.x 2.x 1.x Pronto! MAPI Connector  RSS   6.1.20 13-Jul-2018 Valid Core License Keys: issued after 01-Feb-2014. Pronto: Pronto! HTML Version 6.1.20 is included. MAPI: the MAPI Connector version 1.54.12.27 is included. Bug Fix: TLS: 6.1.6: closed the possible vulnerability to ROBOT attacks using "bad-version oracle" vector. Bug Fix: WEBSKIN: addressed leak of session info through the usage of some service scripts in the basic skin. Bug Fix: AIRSYNC: 5.2: server might crash while parsing incorrect calendar data. Bug Fix: AIRSYNC: 5.4.1: updated calendar items might lose description text. Bug fix: WEBUSER: 6.1.19: XIMSS clients (Pronto) might fail to list attachments in some messages. Bug Fix: LOCAL: an authenticated user could send to "all" address on behalf of administrator. Bug Fix: WEBUSER: 4.1: HTML tag validator might let through parameters with active content.

6.1.19 26-Dec-2017
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.19 is included.
• MAPI: the MAPI Connector version 1.54.12.22 is included.
• WEBUSER: extra protection from WebUser session stealing and cross-site scripting.
• WEBSKIN: Crystal: fixed scripting vulnerability.
• Bug Fix: AIRSYNC: 5.2: calendar items updated server-side could not be removed.
• Bug Fix: QUEUERULES: 5.4: server might crash on incorrect rules data.

6.1.18 15-Sep-2017
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.18 is included.
• MAPI: the MAPI Connector version 1.54.12.20 is included.
• WEBUSER: extra protection from WebUser session stealing and cross-site scripting.
• KERNEL: the logic of searches through host lists changed to stop on the first match.
• Bug Fix: WEBUSER: 6.1.17: some messages could not be rendered in framed views.
• Bug Fix: AIRSYNC: 6.1.8: declined calendar events stayed in calendar without notifications to the event organizer.

6.1.17 25-Aug-2017
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.17 is included.
• MAPI: the MAPI Connector version 1.54.12.18 is included.
• WEBSKIN: extra protection from WebUser session stealing and cross-site scripting.
• WEBUSER: extra protection from WebUser session stealing and cross-site scripting.
• CALENDAR: updates to recurring items are processed even if original item is missing.
• TLS 1.2 compatibility with other implementations has been improved.
• SMTP: attacker IP is blacklisted also when errors are made in separate sessions.
• AIRSYNC: added workaround for task updates that miss task start time.
• Bug Fix: SMTP: some locally generated messages might be considered as relayed and blocked with restricted relaying settings.
• Bug Fix: HTTP: some requests with chunked encoding proxied to cluster backends might be processed incorrectly.
• Bug Fix: TLS: the server might crash on TLS handshake with incorrect elliptic curves parameters.

6.1.16 31-Mar-2017
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.16 is included.
• Default password complexity is now enforced during batch account import.
• Bug Fix: TLS: 6.1c processing client certificates could not be optional.
• Bug Fix: WEBUSER: 6.1.10: server might crash on some requests if postmaster account was not available.
• Bug Fix: SIP: 6.1.14: incorrect SDP offer might be generated in some call scenarios.
• Bug Fix: AIRSYNC: 5.2: extra quotes might be added to real names in e-mail addresses and break formatting.

6.1.15 14-Feb-2017
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.15 is included.
• MEDIASERVER: peer detection mechanism has been improved.
• Bug Fix: LDAP: 5.4: extended response packets were constructed incorrectly.
• Bug Fix: SIP: 6.1c1: the FixContact workaround was processed incorrectly.
• Bug Fix: SIP: 6.1c1: the noPath workaround was processed incorrectly.
• Bug Fix: MEDIAPROXY: 6.1c1: SRTP-decoding media proxy might fail under high load.

6.1.14 28-Dec-2016
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.14 is included.
• IMAP: the support for RFC6851 is disabled by default.
• SMTP: domains with MX pointing to server's IPs and not routed within the server are not accepted for relaying.
• CLI: password complexity checks are skipped only when administrator has rights to change complexity.
• WebAdmin: password complexity checks are skipped only when administrator has rights to change complexity.
• IM: the option to deliver all incoming IMs to all sessions and devices has been implemented.
• MEDIAPROXY: peer detection mechanism has been improved.
• Bug Fix: 6.1.9: Foundation: conversion of multi-byte charsets to utf-8 could cause memory corruption.
• Bug Fix: 5.3: Core: authentication using client certificates might fail.
• Bug Fix: 6.0.4: Rules: some non-ASCII encoded attachment names might be decoded incorrectly.

6.1.13 21-Nov-2016
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.13 is included.
• MAPI: the MAPI Connector version 1.54.12.11 is included.
• CG/PL: the syntax of the CryDigest method has been extended to support HMAC algorithm.
• WEBADMIN: fixes to the Dash skin to improve usability.
• Bug Fix: 6.1.12: WEBUSER: long list of addresses in To/Cc/Bcc fields might be truncated.

6.1.12 30-Sep-2016
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.12 is included.
• MAPI: the MAPI Connector version 1.54.12.9 is included.
• PKI: the option to select signature algorithm for SSL/TLS certificates and signing requests has been implemented.
• WEBUSER: handling of the mailto: links has been improved.
• DTLS: workaround for Chrome WebRTC / OpenSSL DTLS bugs is implemented.
• IMAP: the support for RFC6851 has been documented and enabled.
• PLATFORM: AIX: PowerPC 64 bit is supported with a native build now.
• Bug Fix: 5.0c1: SIP: the alternative "l" header field was not supported for packets received via TCP/TLS.
• Bug Fix: 6.1c1: PBXLEG: server might crash on a bridged call attempt with all media ports exhausted.
• Bug Fix: 6.1c1: MEDIASERVER: cluster IP might be exposed to external peers in cases of intra-cluster bridging.
• Bug Fix: 6.0.1: LDAP: some requests under the dc=cgprouter subtree might be processed incorrectly.
• Bug Fix: 6.1c4: FTP: using invalid paths with some commands might cause server crash.
• Bug Fix: 6.1c1: WEBSKIN: Crystal: address books might fail to list records.
• Bug Fix: 6.1c1: PKI: self-generated S/MIME issuer certificate lacked critical basic constrains.

6.1.11 20-Jun-2016
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.11 is included.
• MAPI: the MAPI Connector version 1.54.12.7 is included.
• EULA has been updated.
• STUN: unknown attributes cause errors only if they are in the "required" category.
• CardDAV: absolute references are supported in address book "multiget" requests.
• WebUser: the Crystal skin implements the support for identities.
• Bug Fix: 6.1c1: PBXLEG: some bridging scenarios might fail.
• Bug Fix: 6.1c1: CGI: incorrect format was used for the REMOTE_ADDR CGI variable.
• Bug Fix: 6.1c4: CG/PL: some complex CG/PL programs might fail to compile.
• Bug Fix: 6.0: IM: storing of IMs received while offline could not be turned off.
• Bug Fix: 6.1.9: AIRSYNC: initial sync might fail for some clients.
• Bug Fix: 6.1.10: QUEUERULES: the Vacation rule start date was processed incorrectly.
• Bug Fix: 5.0: CALENDAR: some complex time zone definitions were processed incorrectly.
• Bug fix: 5.x: XIMSS: non-routable addresses blocked remaining valid addresses from being included into replies.
• Bug Fix: 5.x: CLUSTER: some specific operations on shared folders might cause server crash.

6.1.10 20-Apr-2016
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.10 is included.
• MAPI: the MAPI Connector version 1.54.12.6 is included.
• QUEUERULES: the Vacation rule functionality is extended.
• IMAP: the XLIST command is implemented.
• CLI: the syntax of the RENAMEDOMAIN command has been extended to allow storage point specification.
• CLUSTER: the remote server connection state is checked before a Virtual Mailbox is reused.
• PBXApp: the RejectCall parameters are extended.
• SIGNAL: when a forked signal cannot be cancelled, it is immediately removed from the fork set.
• Bug Fix: 6.1.8: CALENDAR: IM and E-Mail calendar alarms might show the time till event incorrectly.
• Bug Fix: 6.0: AIRSYNC: mailbox search parameters were processed incorrectly.
• Bug Fix: 6.1.7: CalDAV: calendar parsing might loop on requests with incomplete filter data.
• Bug Fix: 6.1c2: XIMSS: Notifications for mailboxes with non-ASCII names might be lost.
• Bug Fix: 6.1c1: CALLLEG: a response to an INVITE/replaces request could drop the MediaProxy built for the request.
• Bug Fix: 6.1c1: CALLLEG: timeout, CANCEL and incoming BYE in the PRACK-waiting state could be processed incorrectly.
• Bug Fix: 6.1.3: PBXLEG: server might crash on bridged calls with non-AV media streams.
• Bug Fix: 6.1c2: PBXLEG: update soliciting could fail.
• Bug Fix: 6.1.5: Core: S/MIME signatures for attachments with non-ASCII names might be calculated incorrectly.
• Bug Fix: 4.0: SNMP: the GetNext request for a non-array "type" object did not return the "leaf" object.

6.1.9 02-Mar-2016
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.9 is included.
• AIRSYNC: the support for availability data retrieval has been implemented.
• CORE: added support for UTF-7 encoding.
• XIMSS: added workaround for incorrectly encoded attachment names.
• CLI: the syntax of the RENAMEACCOUNT command has been extended to allow storage point specification.
• SIP: implemented domain prefixes for registration of endpoints that require secure media.
• Bug Fix: 6.1: DIALOG: MEDIAPROXY short-circuit optimization could result in media absence in transferred calls.
• Bug Fix: 5.4: CLUSTER: failed WebUser logins in cluster environments might be used for valid account name discovery.
• Bug Fix: 6.1c2: AIRSYNC: handling some requests might lead to memory corruption.
• Bug Fix: 6.1c1: DIALOG: non-fatal negative mid-call response could close the call.
• Bug Fix: 6.1c1: QUEUE: server might crash on mail queuing to non-email modules.
• Bug Fix: 6.0c1: LOCAL: random memory corruption and crashes might happen under a heavy load.
• Bug Fix: 5.4: ACCOUNT: file lock owner information could be stored without XML namespaces.

6.1.8 30-Dec-2015
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.8 is included.
• MEDIA: workaround for some WebRTC clients that depend on SDP attributes order.
• CALENDAR: the text of IM and E-Mail reminders has been improved.
• AIRSYNC: server-side replies to meeting invitations are suppressed in favour to those generated by clients themselves.
• Bug Fix: 6.1c2: XIMSS: server might crash on events sent to XIMSS sessions.
• Bug Fix: 6.1.7: PLATFORM: MacOS X installation scripts attempted to rename the mail utility with the "rootless mode" in effect.

6.1.7 05-Nov-2015
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.7 is included.
• Kernel: Elliptic Curve Private Key support is implemented (RFC5915, RFC4492, RFC5289).
• TLS: additional cipher suites are implemented.
• AIRSYNC: order of properties in the ItemOperations/Fetch request result changed to help some clients with attachments downloading.
• PLATFORM: MacOS X: the location of the Application Directory changed from /usr/sbin to /usr/local to meet the new security requirements.
• Bug Fix: 5.4: SMPP: incorrect NPI value was used for alpha-numeric TON.
• Bug Fix: 5.3: AIRSYNC: meeting attendees received duplicated invitations and updates.
• Bug Fix: 5.3: CalDAV: item filters might be applied incorrectly so no events were shown in some clients.
• Bug Fix: DOMAINS: all domain's directory records were deleted with domain affecting distributed domains.
• Bug Fix: 6.1c3: WebUser: Calendars could not be scrolled to previous dates.
• Bug Fix: 6.1.3: Directory: routing of signal requests in some distributed domain configurations might fail.
• Bug Fix: 6.1.6: WebSkin: rich text formatting in message composer was broken.
• Bug Fix: 6.0: Core: converting text to two-bytes character sets might crash the server.

6.1.6 30-Sep-2015
Valid Core License Keys: issued after 01-Feb-2014.

• Pronto: Pronto! HTML Version 6.1.6 is included.
• MAPI: the MAPI Connector version 1.54.12.5 is included.
• Kernel: Diffie-Hellman PKI cryptography is implemented.
• Kernel: Elliptic Curves cryptography is implemented.
• TLS: Ephemeral Diffie-Hellman suites are implemented.
• TLS: Ephemeral Elliptic Curves suites are implemented.
• TLS: PFS (Perfect Forward Secrecy) is implemented.
• Foundation: enhanced upsampling/downsampling algorithms for G.711 codecs are implemented.
• WebSkin: Simplex: improved JS code to detect the MS Edge browser.
• CalDAV: added workaround for clients that fail to use parent event when rendering exceptions.
• Bug Fix: 6.0: AIRSYNC: calendar item was not updated on the server when only end time was changed.
• Bug Fix: 6.1.1: Media: some SRTP-related attributes might be incorrectly output to SDP text.
• Bug Fix: 6.1.3: Core: MIME atoms with multi-byte encodings might be wrapped incorrectly.
• Bug Fix: 6.1.5: Core: long names of attached files might be encoded incorrectly.
• Bug Fix: 6.c1: SIGNAL: A/V calls could be forked to XMPP sessions.

6.1.5 3-Aug-2015
Valid Core License Keys: issued after 01-Feb-2014.

• CalDAV: Meeting invitations are sent automatically.
• TLS: with Weak Ciphers disabled RC4 cipher is advertised only for old clients (SSL 3.0 and TLS 1.0).
• Pronto: Pronto! HTML Version 6.1.5 is included.
• Bug Fix: 6.1c1: WebSkins: Crystal: adding attachments to messages did not work in Internet Explorer 11.
• Bug Fix: 6.1c1: Core: some non-ASCII names of attached files might be encoded incorrectly.
• Bug Fix: 5.4: XMPP: the 'from' attribute was not included into server-server responses.

6.1.4 25-Jun-2015
Valid Core License Keys: issued after 01-Feb-2014.

• AIRSYNC: workaround for possible E-Mail address corruption in Contacts by some Android devices.
• Pronto: Pronto! HTML Version 6.1.4 is included.
• Bug Fix: 6.1c4: Media: the support for peer-to-peer media might be improperly enabled.
• Bug Fix: 6.1c5: Mailbox: empty Sliced mailboxes might be reported in the logs as having damaged index file.
• Bug Fix: 6.1.3: HTTPU: some sub-protocol HTTP connections could not be restricted to Client IPs only.
• Bug Fix: 6.1c1: CLI: some read commands were not available to administrators with the Read All Domains right.

6.1.3 12-Jun-2015
Valid Core License Keys: issued after 01-Feb-2014.

• WebUser: "regular" login operations now check the HTTP WebUser Access setting, too.
• HTTP: when a CGI application is started, countermeasures for CVE-2014-6271 "bash" vulnerability are applied.
• Directory: routing of signal requests in distributed domains is improved.
• Pronto: Pronto! HTML Version 6.1.3 is included.
• MAPI: the MAPI Connector version 1.54.12.2 is included.
• Bug Fix: 6.1c2: XIMSS: certain TCP-based login methods could cause server crashes.
• Bug Fix: 6.1c1: SIP: CANCEL requests in a Cluster environment could be sent via a wrong cluster member.
• Bug Fix: 6.1.2: FTP: NLST command could crash the server.
• Bug Fix: Keys: plugin keys issued after April 2015 might be shown as expired.

6.1.2 16-Mar-2015
Valid Core License Keys: issued after 01-Feb-2014.

• Platform: Linux/ARMv6-11 (including Raspberry Pi) is supported now.
• SIP: now the "Paid SIP Server" setting is not applied to REGISTER requests.
• Pronto: Pronto! HTML Version 6.1.2 is included.
• Bug Fix: 6.1c1: CALLLEG: packets with misformed SDP could crash the server.
• Bug Fix: 6.1c1: MEDIASERVER: adjusting to client timers did not work properly.
• Bug Fix: 6.1c1: FTP: the NLST command could fail to enumerate directory contents.
• Bug Fix: 6.1c1: SIGNAL: the "presence on registration" SIP Workaround option could cause server crash.
• Bug Fix: 5.4: QUEUERULES: certain misformed operations could de-sync the cluster delivery protocol.
• Bug Fix: 2.0: MAILBOX: updating mailbox message flags by some session could reset internal "marked" flags set on that message by other sessions.
• Bug Fix: 5.4: MAILBOX: the "Erase deleted messages" function could fail for directory-type mailboxes.

6.1.1 23-Feb-2015
Valid Core License Keys: issued after 01-Feb-2014.

• MEDIAPROXY: peer detection mechanism has been improved.
• MEDIASERVER: peer detection mechanism has been improved.
• SIP: separate settings for the SRTP and DTLS media protocols are implemented.
• SIP: the Optional Media Security setting is implemented.
• Bug Fix: 6.1c2: XIMSS: tcp connections attempts from banned clients could crash the server.
• Bug Fix: 6.1c1: MEDIAPROXY: RTCP packets could be relayed to RTP ports.
• Bug Fix: 6.1c2: PBXLEG: the leg processor looped on answering start-bridged UPDATE request.
• Bug Fix: 6.0: some misformed RTP packets could crash the server.
• Bug Fix: 5.4: certain header fields could cause the server to loop while converting them into Chinese charsets.

6.1 15-Feb-2015
Valid Core License Keys: issued after 01-Feb-2014.

• ADMIN: the Can Read All Domain and Account Settings access right is implemented.
• ADMIN: the CanCreateSpecialAccounts Domain-level access right is implemented.
• ACCOUNTS: the Log Protocols setting is implemented.
• Pronto: Pronto! HTML Version 6.1 is included. It is the default "Pronto" interface now.
• Platform: Sparc Solaris versions are built for the Sparc v8 architecture now, to avoid slowdowns on newer hardware.
• ROUTER: the .via, .relay, .domain, .local, .here, .xmpp, .xmppq, .enum, .noenum special domain name suffix strings are renamed into ._via, ._relay, ._domain, ._local, ._here, ._xmpp, ._xmppq, ._enum, ._noenum suffix strings.
• MAILBOX: Sliced mailbox crash-recovery has been improved.
• DIAMETER: the DIAMETER module is decommissioned.
• Bug Fix: 6.1c1: ACCOUNT: limiting the number of concurrenly open Account sessions could crash the server.
• Bug Fix: 6.1c1: ACCOUNT: accounts in secondary domains scheduled for mail store re-scanning were rescanned in a loop.
• Bug Fix: 6.0c1: STATISTICS: the string-type trigger events were not restored after server restart.
• Bug Fix: 6.1c1: CLUSTER: the REJECTQUEUEMESSAGES command was not working in Cluster environments.

6.1c4 05-Feb-2015
Valid Core License Keys: issued after 01-Feb-2014.

• CG/PL: global constants are implemented.
• Platform: a workaround for MS Windows kernel bug implemented. Stopped external tasks could remain undetected if several tasks were started at the same time.
• FTP: command processing redesigned to remove file path length limitations.
• AIRSYNC: now the Enabled Mobile Devices settings can be specified using the Account Default Settings.
• AIRSYNC: now the Enabled Mobile Devices settings can include allowed and prohibited device IDs and device types.
• PBX: the "telephony tester" application is included.
• Bug Fix: 6.0c2: CLUSTER: the ID of the killed NamedTask was sent incorrectly.

6.1c3 29-Jan-2015
Valid Core License Keys: issued after 01-Jan-2014.

• CLUSTER: when a server is marked as 'non-ready', its unlocked accounts are released immediately.
• WebUser: the Event and Task Categories fields can be modified now.
• WSSP: the REQUESTSOURCEIP function is implemented.
• PKI: certificates with SHA256 signatures are supported now.
• CLI: the TEMPBLACKLISTIP command is implemented.
• SMTP: the HELO Domain Prefix module setting is removed; the HELO Prefix setting is added to Domain SMTP settings.
• QUEUERULES: the Copy Attachments action is applied to one-part message containing an attachment.
• Bug Fix: SMTP: 6.1c1: the Require STARTTLS setting did not work.
• Bug Fix: HTTP: 6.1c1: cluster authentication could crash the server.
• Bug Fix: TLS: 6.1c1: communicating with products that generate empty data-blocks (such as those based on OpenSSL) could be interrupted.
• Bug Fix: CLUSTER: 6.0c2: if a signal is redirected to a Named Task, and that Task runs on a different member, the relayed request contained the original request URI.

6.1c2 12-Dec-2014
Valid Core License Keys: issued after 01-Nov-2013.

• WEBDAV: the "include" PROPFIND element is supported now.
• FILEDAV: directories now report the "httpd/unix-directory" value for the "getcontenttype" property.
• PBXApp: the "allowedAttributes","allowedSSRC" call parameters are implemented.
• XIMSS: the callRedirect operation supports the "fork" option now.
• AIRSYNC: the ValidateCertificate command is implemented.
• WebUser/Pronto: the "show images using proxy" option and the "show HTML in a frame" option can work together now.
• SMTP,POP,IMAP,FTP,HTTP: attempts to start SSL/TLS connections on clear text ports are detected now; connections are dropped immediately.
• LIST: the ^C symbol combination is supported in Feed headers and trailers.
• CLI: the CREATEDOMAINSTORAGE, LISTDOMAINSTORAGE, CREATEACCOUNTSTORAGE, LISTACCOUNTSTORAGE commands are implemented.
• DIRECTORY: when a Remote Unit reads a "search reference" record, the record is ignored, but the search continues.
• CG/PL: the MailboxAppend operation parameters have been changed.
• XIMSS: the messageAppend, contactAppend operation parameters have been changed.
• Bug Fix: DIALOG: 6.1c1: requests on "early" dialogs (UPDATE, INFO) could fail.
• Bug Fix: WEBADMIN: 6.1c1: account creation could fail when no "Mount Storage Point" was specified.
• Bug Fix: MEDIASERVER: 6.1c1: the GETPLAYPOSITION function did not return positive values.
• Bug Fix: MAPI: messages sent from the Main Domain were not marked as 'trusted'.

6.1c1 28-Nov-2014
Valid Core License Keys: issued after 01-Nov-2013.

• Pronto: Pronto! HTML Version 6.1 is included. It is the default "Pronto" interface now.
• CALLLEG: the internal engine has been redesigned.
• PBXLEG: the module has been redesign to provide for correct offer/answer negotiations.
• WEBADMIN: the "Dash" Skin has been added.
• TLS: DTLSv1.0 (RFC4347) and DTLSv1.2 (RFC6347) are implemented .
• TLS: RFC5705 is implemented.
• TLS: the Oldest Accepted setting is implemented.
• Kernel: Email address header field composing has been improved.
• NETWORK: the Re-usage Delay setting is implemented.
• NETWORK: DNR statistics elements are added.
• NETWORK: now the Debug IP functionality is applied to UDP-based protocols, too.
• SMTP: when a remote host accepts the ATRN command and sends messages back to the Server, these messages are processed as coming from a "trusted" (client IP) source.
• QUEUE: now Message envelopes store the authenticated sender's account name.
• QUEUE: the Reject All Sender's Messages WebAdmin command is implemented.
• CLI: the REJECTQUEUEMESSAGES command is implemented.
• CLI: the CREATEDOMAIN command is extended; the CREATESHAREDDOMAIN command is deprecated.
• DOMAINS: the Storage Mount Point directories are implemented.
• DOMAINS: the Require STARTTLS setting is implemented.
• ACCOUNTS: the Storage Mount Point directories are implemented.
• ACCOUNTS: the POP, IMAP, AirSync, XMPP, XIMSS, WebUser Session Limit settings are implemented.
• ACCOUNTS: the "verify" type records are added to the Login Logs.
• QUEUERULES: External Filter protocol version 4 is implemented.
• AIRSYNC: Notes synchronization is implemented.
• AIRSYNC: "partial" SYNC requests are supported now.
• AIRSYNC: attempts to submit duplicate Email messages are detected now.
• AIRSYNC: the Settings command implementation has been extended.
• LOCAL: INBOX opening is postponed till actual message delivery.
• SMTP: message queue names for "Hold" domains do not include the source domain names now.
• SMTP: the Require STARTTLS setting is implemented.
• SIGNAL: the AOR Limit and Fork Limit settings are implemented.
• SIGNAL: the downstream request (ACK) processing moved to asynchronous objects.
• SIGNAL: the DIALOG (Call) manager and proxy-building mechanisms are re-implemented.
• SIGNAL: the CDR records now use the tabulation (instead of the space) symbol as the field separator.
• XIMSS: the 'version' login parameter is implemented.
• XIMSS: the signaling (call management) operations have been re-designed, protocol has changed.
• XIMSS: the EmptyMailbox operation is implemented.
• XIMSS: the setSessionOption operation is implemented.
• XIMSS: the setTimeout operation is deprecated.
• XIMSS: WebRTC media support is implemented.
• XIMSS: PROFILE retrieval is implemented.
• CALLLEG: 422 error code processing has been improved.
• CALLLEG: the Advertise UPDATE and Send UPDATE settings are deprecated.
• DIRECTORY: the LDAP Unit Search Filter setting is implemented.
• SIP: downstream request and upstream response processing moved to SIPS and SIPC asynchronous objects.
• SIP: now a MediaProxy can be built for INVITE requests without an SDP body.
• SIP: the BadUPDATE workaround option is implemented.
• SIP: the Transport Settings page is implemented.
• RSIP, RPOP: "next record to process" selection algorithm has been improved.
• IMAP: RFC6154 has been implemented.
• GROUPWARE: Russian timezones are updated to reflect 2014 changes.
• PBXLEG: the "Reason" header field of provisioning responses is copied between egress and ingress legs of bridged calls.
• CLUSTER: the sent SMTP ATRN commands use the Cluster name now.
• CLUSTER: virtual mailbox updates are detected automatically now.
• WSSP: the RequestResource() function is implemented.
• WebApp: the GetHTTPResource() CG/PL function is implemented.
• WEBUSER: the "Crystal" Skin has been added.
• PBXApp: SignalOption() functionality has been extended.
• Foundation: the SDP XML representation now includes "info" elements.
• MEDIASERVER: RFC5763, RFC5764 (DTLS-SRTP) are implemented.
• MEDIASERVER: WebRTC media support is implemented.
• MEDIASERVER: inbound DTMF recognition now works for 8KHz, 16KHz, and 24KHz internal buffer sampling rates.
• MEDIASERVER: current audio level calculations have been improved.
• MEDIAPROXY: RFC5763, RFC5764 (DTLS-SRTP) are implemented.
• MEDIAPROXY: WebRTC media support is implemented.

Summary

• the Storage Mount Point directories are implemented.
• the POP, IMAP, AirSync, XMPP, XIMSS, WebUser Session Limit settings are implemented.
• the Log Protocols setting is implemented.
• the "verify" type records are added to the Login Logs.

• the Can Read All Domain and Account Settings access right is implemented.
• the CanCreateSpecialAccounts Domain-level access right is implemented.

• Notes synchronization is implemented.
• "partial" SYNC requests are supported now.
• attempts to submit duplicate Email messages are detected now.
• the Settings command implementation has been extended.
• the ValidateCertificate command is implemented.
• the Enabled Mobile Devices settings can be specified using the Account Default Settings.
• the Enabled Mobile Devices settings can include allowed and prohibited device IDs and device types.
• order of properties in the ItemOperations/Fetch request result changed to help some clients with attachments downloading.
• the support for availability data retrieval has been implemented.

• Meeting invitations are sent automatically.

• the internal engine has been redesigned.
• 422 error code processing has been improved.
• the Advertise UPDATE and Send UPDATE settings are deprecated.

• the MailboxAppend operation parameters have been changed.
• global constants are implemented.

• the REJECTQUEUEMESSAGES command is implemented.
• the CREATEDOMAIN command is extended; the CREATESHAREDDOMAIN command is deprecated.
• the CREATEDOMAINSTORAGE, LISTDOMAINSTORAGE, CREATEACCOUNTSTORAGE, LISTACCOUNTSTORAGE commands are implemented.
• the TEMPBLACKLISTIP command is implemented.
• RENAMEACCOUNT and RENAMEDOMAIN commands support storage path specification.

• the sent SMTP ATRN commands use the Cluster name now.
• virtual mailbox updates are detected automatically now.
• when a server is marked as 'non-ready', its unlocked accounts are released immediately.

• the DIAMETER module is decomissioned.

• the LDAP Unit Search Filter setting is implemented.
• when a Remote Unit reads a "search reference" record, the record is ignored, but the search continues.

• the Storage Mount Point directories are implemented.
• the Require STARTTLS setting is implemented.

• directories now report the "httpd/unix-directory" value for the "getcontenttype" property.

• the SDP XML representation now includes "info" elements.

• attempts to start SSL/TLS connections on clear text ports are detected now; connections are dropped immediately.
• command processing redesigned to remove file path length limitations.

• Russian timezones are updated to reflect 2014 changes.
• Text of IM and E-Mail reminders has been improved.

• attempts to start SSL/TLS connections on clear text ports are detected now; connections are dropped immediately.

• the support for RFC6851 has been documented and enabled.
• RFC6154 has been implemented.
• attempts to start SSL/TLS connections on clear text ports are detected now; connections are dropped immediately.
• added support for the XLIST command.

• Email address header field composing has been improved.
• Diffie-Hellman PKI cryptography is implemented.
• Elliptic Curves cryptography is implemented.
• Elliptic Curve Private Key support is implemented (RFC5915, RFC4492).
• Support for UTF-7 encoding.

• the ^C symbol combination is supported in Feed headers and trailers.

• INBOX opening is postponed till actual message delivery.

• Sliced mailbox crash-recovery has been improved.

• RFC5763, RFC5764 (DTLS-SRTP) are implemented.
• WebRTC media support is implemented.
• peer detection mechanism has been improved.

• RFC5763, RFC5764 (DTLS-SRTP) are implemented.
• WebRTC media support is implemented.
• inbound DTMF recognition now works for 8KHz, 16KHz, and 24KHz internal buffer sampling rates.
• current audio level calculations have been improved.
• peer detection mechanism has been improved.

• the Reusage Delay setting is implemented.
• DNR statistics elements are added.
• now the Debug IP functionality is applied to UDP-based protocols, too.

• the "telephony tester" application is included.

• SignalOption() functionality has been extended.
• the "allowedAttributes","allowedSSRC" call parameters are implemented.

• the module has been redesign to provide for correct offer/answer negotiations.
• the "Reason" header field of provisioning responses is copied between egress and ingress legs of bridged calls.

• certificates with SHA256 signatures are supported now.
• the option to select signature algorithm for SSL/TLS certificates and signing requests has been implemented.

• a workaround for MS Windows kernel bug implemented. Stopped external tasks could remain undetected if several tasks were started at the same time.
• Sparc Solaris versions are built for the Sparc v8 architecture now, to avoid slowdowns on newer hardware.
• AIX PowerPC 64 bit is supported with a native build now.
• the location of the Application Directory on MacOS X changed to meet the new security requirements.

• attempts to start SSL/TLS connections on clear text ports are detected now; connections are dropped immediately.

• Pronto! HTML Version 6.1 is included. It is the default "Pronto" interface now.

• now Message envelopes store the authenticated sender's account name.
• the Reject All Sender's Messages WebAdmin command is implemented.

• External Filter protocol version 4 is implemented.
• the Copy Attachments action is applied to one-part message containing an attachment.
• the functionality of the Vacation rule is extended.

• the .via, .relay, .domain, .local, .here, .xmpp, .xmppq, .enum, .noenum special domain name suffix strings are renamed into ._via, ._relay, ._domain, ._local, ._here, ._xmpp, ._xmppq, ._enum, ._noenum suffix strings.

• "next record to process" selection algorithm has been improved.

• "next record to process" selection algorithm has been improved.

• the AOR Limit and Fork Limit settings are implemented.
• the downstream request (ACK) processing moved to asynchronous objects.
• the DIALOG (Call) manager and proxy-building mechanisms are re-implemented.
• the CDR records now use the tabulation (instead of the space) symbol as the field separator.

• downstream request and upstream response processing moved to SIPS and SIPC asynchronous objects.
• now a MediaProxy can be built for INVITE requests without an SDP body.
• the BadUPDATE workaround option is implemented.
• the Transport Settings page is implemented.
• Domain prefixes for registration of endpoints that require secure media are implemented.

• when a remote host accepts the ATRN command and sends messages back to the Server, these messages are processed as coming from a "trusted" (client IP) source.
• message queue names for "Hold" domains do not include the source domain names now.
• the Require STARTTLS setting is implemented.
• attempts to start SSL/TLS connections on clear text ports are detected now; connections are dropped immediately.
• the HELO Domain Prefix module setting is removed; the HELO Prefix setting is added to Domain SMTP settings.

• TLS: DTLSv1.0 (RFC4347) and DTLSv1.2 (RFC6347) are implemented .
• TLS: RFC5705 is implemented.
• TLS: the Oldest Accepted setting is implemented.
• TLS: Ephemeral Diffie-Hellman suites are implemented.
• TLS: Ephemeral Elliptic Curves suites are implemented.
• TLS: PFS (Perfect Forward Secrecy) is implemented.
• TLS: additional cipher suites are impemented.

• the "Dash" Skin has been added.

• the GetHTTPResource() CG/PL function is implemented.

• the "include" PROPFIND element is supported now.

• the "Crystal" Skin has been added.
• the "show images using proxy" option and the "show HTML in a frame" option can work together now.
• the Event and Task Categories fields can be modified now.

• the RequestResource() function is implemented.
• the REQUESTSOURCEIP function is implemented.

• the 'version' login parameter is implemented.
• the signaling (call management) operations have been re-designed, protocol has changed.
• the EmptyMailbox operation is implemented.
• the setSessionOption operation is implemented.
• the setTimeout operation is deprecated.
• WebRTC media support is implemented.
• PROFILE retrieval is implemented.
• the callRedirect operation supports the "fork" option now.
• the messageAppend, contactAppend operation parameters have been changed.