MailMonitor for Notes/Domino R4/R5/R6 Release Notes --------------------------------------------------- Version 2.0.2, May 2003 www.sophos.com Contents -------- 1 Installing MailMonitor for Notes/Domino 2 Running MailMonitor for Notes/Domino 3 Removing MailMonitor for Notes/Domino 4 Mode of operation 5 Known problems with this version 1 Installing MailMonitor for Notes/Domino ----------------------------------------- Before installing this product on a Windows NT (Intel)/Windows 2000 Server running Lotus Domino, all Lotus Domino and Lotus Notes processes must be stopped. MailMonitor for Notes/Domino requires SAVI, which is provided by Sophos Anti-Virus for Windows NT/2000. Install Sophos Anti-Virus for Windows NT/2000 on the file server before installing MailMonitor for Notes/Domino. Once Sophos Anti-Virus for Windows NT/2000 has been installed, run the MailMonitor for Notes/Domino setup program and follow the on-screen instructions. MailMonitor for Notes/Domino is controlled by three databases: 1. MailMonitor for Notes/Domino, the configuration database 2. MailMonitor Log and archive, the log and quarantine area 3. MailMonitor Help, the help database For default installations these databases can be found in the C:\Program files\Sophos\MailMonitor\Notes directory. A link directory is placed in the Domino server directory, allowing the databases to be opened on the Domino server. You can add the MailMonitor for Notes/Domino database to your workspace, allowing you to control the operation of the software. Note: If you attempt to install more than one on-access mail scanner onto your Notes/Domino server, mail delivery may stop. To use MailMonitor for Notes/Domino, ensure that you first uninstall all other on-access scanners, such as MailSweeper or Groups's Watchdog. 2 Running MailMonitor for Notes/Domino -------------------------------------- There are two scanner tasks which run on the server: savdb and savmail. When a change is made to the configuration database, the two scanner tasks take approximately 30 seconds to implement the change. Once a scheduled or an immediate scan job starts, it cannot be stopped. A recursive scan (*.nsf#R) of a newly created (empty) Domino server typically takes 20 minutes. When the software is first installed, the administrator should configure any scheduled jobs required, and make the appropriate changes to the ACL. The database scanner task will only perform a scheduled scan on a particular database if the database has changed since it was last scanned. The record of these changes is kept partly by the Domino server and partly by the MailMonitor Log and archive database. When a job is first created, the MailMonitor Log and archive database will have no record of that job being run (as shown in the MailMonitor Log and archive 'Scanned' view). A full scan will be performed the next time a job is run. 3 Removing MailMonitor for Notes/Domino --------------------------------------- To remove the software use the MailMonitor uninstaller found using the 'Add/Remove programs' in the Control Panel and then delete the database icons from the Notes workspace. 4 Mode of operation ------------------- By default, MailMonitor for Notes/Domino will append a virus alert to any quarantined email sent on to the recipient even after the virus has been disinfected. To prevent the sending of such virus alerts the line ToolKit_Wdog_Opts = HEALMEMO should be removed from the Notes.ini file. Setup runs a Windows NT console application which signs the new databases, so the Lotus Domino server accepts them without the administrator having to cross-certify them. This application searches for a pre-defined list of files. If these are not found, it may fail, giving an error code. By default, MailMonitor for Notes/Domino starts housekeeping around 3:30 a.m., shutting down the mail router. As a result, the mail grabber also shuts down, so no pending email will be routed or scanned until the mail router has finished compacting. If it is necessary to specify an alternative time for this to be carried out, it is possible to append the line TOOLKIT_HOUSKEEPINGAT=14, were the number represents the hour in 24 hour format. 5 Known problems with this version ---------------------------------- * InterCheck client If the InterCheck client is running locally, it may detect viruses in SMTP email attachments when the Notes/Domino server temporarily detaches the files for processing. In such cases, InterCheck will prevent all further access to such files, causing an SMTP error and the loss of the attachment. If InterCheck is required on the server, files put into the 'temp' directory should be excluded from on-access scanning by InterCheck by adding the directory and a wildcard filename to the exclusion list in SWEEP for NT, e.g. add "c:\temp\????????.???". * Corrupt emails It is necessary to convert all mails to Notes format for the purpose of virus scanning. If an incoming mail is encoded (in particular uuencoded), and the encoding is corrupt in any way, there is the possibility that the mail may be left open in the mail routing box in conversion mode. If this happens the mail concerned must be deleted, this is indicated by a red exclamation mark next to the problem mail. It can be assumed that the conversion of a mail has run into difficulty if the mail concerned has remained in the mail routing box for a period of 10 minutes or more. If a mail is left in the mail routing box, it is possible that the mail concerned may crash the Domino server. This problem is prevalent in early versions of the Domino server. Domino servers 5.0.4 upwards handle this scenario better, and a mail may still get stuck in the routing box, but it will not crash the server. It is advisable to upgrade to the latest Domino server wherever possible. ----------------