Lakewood Communications
XWALLFilter for Microsoft Exchange 2003
Installation Guide and Release Notes
Version
2.0.7653.187
Copyright
© 2008 Lakewood Communications
Last modified: November 5, 2008
Please read this document
for installation and release information about Lakewood Communication’s
XWALLFilter for Microsoft Exchange 2003. This document discusses the following
topics:
Overview
XWALLFilter is an add-on product for DataEnter's XWall (edge e-mail firewall and antispam solution). XWALLFilter enhances XWall's capabilities in sites which run Microsoft Exchange 2003 Server and/or Small Business Server 2003. XWALLFilter provides XWall with native, server based support for the Microsoft Exchange 2003 Antispam API and Junk E-Mail folder.
XWALLFilter examines all anonymous SMTP email entering your Exchange 2003 server from XWall. If one of the various XWall firewall filters (subject, text, html, spf, bayes, heuristic, image, etc) has been triggered and the XWall option "Mark subject and move to Junk E-Mail folder" has been selected, XWALLFilter routes the message to each mailboxes "Junk E-mail" folder automatically. This allows the network manager to configure one or all of the XWall filters as "Mark subject and move to Junk E-Mail folder" and let each user have final control over what is and what is not considered SPAM.
XWALLFilter pays attention to the Exchange 2003 per-mailbox SAFE SENDERS and SAFE RECIPIENTS list (Can be accessed in either the full Outlook client under Tools->Options->Junk Email or in Outlook Web Access under Options). Any incoming email from addresses on the mailbox SAFE SENDERS list (or mailbox CONTACTS folder) is always placed in the INBOX and never placed in the user's JUNK E-MAIL folder. If the user finds good email in the JUNK E-MAIL folder, he or she can simply right click on the email in Outlook and select "Junk E-mail->Mark as NOT Junk" to have the address added to the mailbox SAFE SENDERS list and move the message back to Inbox in one simple operation.
XWALLFilter does not require users have the latest version of Outlook installed and may be used with any e-mail client since it runs upstream of clients on the Exchange server. If desired, users can simply use Outlook Web Access without any e-mail client installed on the desktop.
System Requirements
The following
are the minimum system requirements to install and run XWALLFilter for Exchange
2003:
1. DataEnter XWall 3.42+ suggested (version 3.38 or higher is required)
2. 10MB (megabytes) of hard disk space
3. Domain Admin rights to install and configure
4. Microsoft Windows 2000 SP3+, Windows 2003, Windows 2003 R2, Small Business Server 2003 or SBS 2003 R2
5. Microsoft Exchange 2003 (with or without SP1 or SP2)
6. In a multiple Exchange server
environment, XWALLFilter should be licensed and installed on all Exchange 2003
Servers which XWall is sending email to (see XWall Admin utility
Options->General->Exchange tab). In an Exchange FE/BE
(Front-End/Back-End) environment, XWALLFilter should usually be licensed and
installed on all FE servers.
Installation
Part-1 (Install XWALLFilter)
Note: This procedure should be completed on your server
running Microsoft Exchange. In sites with a single Exchange Server or Small
Business Server, XWall and XWALLFilter may be run on the same server if
desired.
1.
Uninstall any previous version of
XWALLFilter by closing any open MMC consoles and running the product
uninstaller from Control Panel->Add/Remove programs (if XWALLFilter version
2.0.7638.19 or higher was installed).
2.
CAUTION! Versions of XWALLFilter prior
to 2.0.7638.19 will not have an entry under Add/Remove programs and must be
manually uninstalled as follows: Run "XWALLFilterRemove.cmd" in the
directory you installed XWALLFilter in (usually C:\XWALLFilter), then restart
the "IIS Admin Service". Now delete the old XWALLFilter files and the
directory. If you are unable to delete the files, please make sure you
restarted the "IIS Admin Service" after running
"XWALLFilterRemove.cmd".
3.
Run the XWALLFilter installer and
follow the on-screen instructions.
Note: No server re-start is required for installation; however some
Exchange configurations may require that the Exchange Information Store service
be re-started before XWALLFilter will function properly. If a service re-start
is needed, you will be notified by the installer and you can perform this
manually when appropriate for your site.
Installation Part-2 (License XWALLFilter)
Note: This procedure should be
completed on the server running XWall. If you’re running XWall and XWALLFilter
on the same server this is fully supported in single Exchange Server
environments.
1.
Verify XWall is version 3.42 or
above by running the XWall administration utility (mbadmin.exe) and clicking
HELP->ABOUT. If you’re running an older version, please upgrade before
continuing by downloading XWALL.ZIP from DataEnter
(http://www.dataenter.co.at/download.htm), stopping the XWall service,
overwriting MBSERVER.EXE and MBADMIN.EXE in your C:\XWALL directory and
re-starting XWall.
2.
Enter the XWall Admin utility.
Select View->XWALLFilter Exchange 2003/2007 Junk E-Mail Folder Add-On and
select "Exchange 2003/2007 with XWALLFilter installed". If you’re
running a 30-day trial of XWall, XWALLFilter is automatically licensed in full
function mode during XWall’s trial period and you may skip to Installation
Part-3. If you’re running a licensed copy of XWall and have not yet purchased a
license for XWALLFilter or desire a fully functional 30-day trial, click the
PURCHASE link.
3.
Enter the XWall Admin utility,
Select Help->Licenses->XWALLFilter. If you already have an XWALLFilter
license key (string beginning with ‘D’ and ending with ‘W’, example:
“Duj+0YBiANp/oOVrUWERBEhK0iEsiPsgJBUOsGgapKAHnHtPhuUAxNwfdW”), paste it into
the field LICENSE. If you have an XWALLFilter serial number (string with
dashes, example: “F0D2F21E-CCB0-11D0-A316-00AA00688B10”, click the ACTIVATE
link. The activation web site will issue you a license key to paste into the
field LICENSE.
Note 1: During activation, be sure to select “XWALLFilter for Exchange
2003” in the field PRODUCT.
Note 2: Your XWALLFilter Serial Number and License Key are valuable and
should be kept in a safe place for disaster recovery, maintenance renewals and
product upgrades. Public disclosure or use on more servers than purchased will
cause your license to be automatically disabled.
4.
Also in the XWall Admin utility
under Help->Licenses->XWALLFilter, verify that a VALID email address is
entered under the field “LICENSE E-MAIL” and then click OK. The e-mail address
entered must be valid e-mail address for the Exchange Server on which
XWALLFilter is running.
5. XWall should automatically restart in a minute or two and you should see an entry in the application event log on the Exchange server on which XWALLFilter is installed confirming your license has been enabled. A properly licensed installation will show an event = 15, “XWALLFilter has been enabled”.
Installation Part-3 (Configure XWall)
Note: This procedure should be completed on the server running XWall. If you’re running XWall and XWALLFilter on the same server this is fully supported in single Exchange Server environments.
1.
Enter the XWall Admin utility and
configure the filter action to "Mark subject and move to Junk E-Mail
folder" for those XWall filters (subject, text, html, spf, bayes, heuristic,
etc) you wish XWALLFilter to take action on.
2. If you don't want the subject line of filtered emails to be marked by XWall, simply set the subject marking strings to null in the XWall Admin utility under "View->Advanced Configuration->Mark Subject - 1/2".
1.
VERY IMPORTANT: Close any open MMC
consoles and server/performance monitoring applications.
2. Run the XWALLFilter uninstall from the XWALLFilter
program group or from Control Panel->Add/Remove programs.
Note 1: No server re-start is required for uninstall; however uninstall
requires that the IIS Admin Service be re-started. On Windows 2000 servers, the
uninstaller will prompt for you to perform the re-start of the IIS Admin
Service at the appropriate time during uninstall. On Windows 2003 or above
servers, the uninstaller will perform the re-start of the IIS Admin service
automatically.
Note 2: If during uninstall you experience repeated prompts “XWALLFilter
is still loaded ...” and have closed all MMC consoles and monitoring
applications, please temporarily stop the "Windows Management
Instrumentation" service. If these steps fail to solve this problem, go to
http://www.XWALLFilter.com, click on SUPPORT and we will be glad to help.
How to Upgrade XWALLFilter
Follow the "Installation Part-1" instructions for this new release. You may skip the “Installation Part-2 and “Installation Part-3” if you have previously licensed XWALLFilter and configured XWall.
Troubleshooting
1. Examine
the application event log on the Exchange server on which XWALLFilter is
installed, filtering for entries with Source = XWALLFilter to confirm the
product has been installed and is running properly. A properly licensed
installation will show an event = 15, “XWALLFilter has been enabled” since the
last time the SMTP service was started. If this event is not present, you may
force a refresh of the XWALLFilter license by re-starting XWall.
2. Verify
the mailbox specific Exchange 2003 "Filter Junk E-mail" option has
been enabled by logging into the mailbox using Outlook Web Access 2003 (OWA),
then select OPTIONS, and verify the checkbox "Filter Junk
E-mail" is checked. Note that this option
is enabled automatically if this mailbox user is using Microsoft Outlook
2003/2007 in cached mode. If your users are not using Outlook 2003/2007 in
cached mode, or are using another email client (or an older version of
Outlook), you have two options: a) Enable this option manually in OWA on each
affected mailbox as described above or b) Run a script to enable this option on
some or all of your mailboxes at once. For option B, please download the file
"EnableJunkEmailFilter.zip" by following the link in your product
registration email. If you have not yet registered XWALLFilter, please go to http://www.XWALLFilter.com/registration.
3. Verify
you have re-started the Exchange
Information Store if you were requested to do so by the XWALLFilter installer.
If your not sure, you can verify if this is needed by reviewing the XWALLFilter
installation log available in C:\Program Files\XWALLFilter\XWALLFilter.log.
4. Make
sure that the Exchange SMTP Virtual Server filter options Sender, Recipient,
Connection and Sender ID are unchecked on the Exchange 2003 server that
XWALLFilter is installed on. The filter options can be found in Exchange System
Manager under SERVER->Protocols->SMTP->Default SMTP Virtual
Server->General Tab->Advanced->Edit (where SERVER is the name of the
Exchange 2003 server). There is no reason to enable these SMTP virtual filters
since XWall is performing this filtering.
5. Verify
that XWall is delivering email to the Exchange 2003 Server that XWALLFilter is
installed on.
6. Verify
that XWall is delivering email to the Exchange 2003 Server that XWALLFilter is
installed on anonymously and not through an authenticated logon. XWALLFilter
assumes email delivered through an authenticated logon is trusted and is never
treated as SPAM.
7.
Verify that a VALID email address
is entered under the field “LICENSE E-MAIL” in the XWall Admin utility under
Help->Licenses->XWALLFilter. The e-mail address entered must be valid
e-mail address for the Exchange Server on which XWALLFilter is running.
8. Create a brand new user and associated Exchange
mailbox. Logon to the new mailbox using Outlook Web Access 2003 (OWA), then
select OPTIONS, and enable Junk email support by checking the checkbox "Filter Junk E-mail".
Send email to this new mailbox from an external email account which is not
on your XWall whitelist with a SUBJECT line that is listed in XWall under
Options->Blocking->Subject as being set to “Mark subject and Move to Junk
E-Mail folder”. Confirm that the email is routed to the Junk E-Mail folder
properly. If XWALLFilter works fine on this new mailbox but not on some
existing mailboxes, you may have rule corruption caused by a migration or
import of those mailboxes from PST files. Perform Microsoft knowledgebase
article ID 924297 on an existing mailbox that is broken to confirm if you have
this Exchange problem. After performing this knowledgebase article, toggle the "Filter Junk E-mail" in
Outlook Web Access 2003 (OWA) OFF and then ON again before testing with an
external email account.
9. If these steps fail to solve your problem. Please go to http://www.XWALLFilter.com, click on SUPPORT and we will be glad to help.
Change Log
·
11/05/2008 (Version 2.0.7653.187):
Compatibility
with latest Exchange 2003 hotfixes including fixes for new AntiVirus vendor
issues. Add additional troubleshooting notes. This release supports and has
been tested with: 1) XWall version 3.43. 2) Third party
Exchange native AntiVirus solutions released through October of 2008. 3)
Exchange 2003 Service Pack 2 with or without Exchange 2003 hotfixes and rollups
through October of 2008.
·
07/09/2008 (Version 2.0.7653.173):
Fixed
customer issues with incorrect header hash computations in specific
configurations. This release supports and has been tested with: 1) XWall
version 3.42. 2) Third party Exchange native AntiVirus solutions released
through June of 2008. 3) Exchange 2003 Service Pack 2 with or without Exchange
2003 hotfixes and rollups through June of 2008.
·
04/01/2008 (Version 2.0.7653.167):
Fixed
customer issues with: a) Correctly process system NDRs when routed to the Junk
E-Mail folder by XWall, b) Correct spurious event log entries due to invalid
cryptographic key verification. This release supports and has been tested with:
1) XWall version 3.42. 2) Third party Exchange native AntiVirus solutions released
through March of 2008. 3) Exchange 2003 Service Pack 2 with or without Exchange
2003 hotfixes and rollups through March of 2008.
·
01/19/2008 (Version 2.0.7653.131):
Fixed
customer issues with: a) Message stream processing skipped emails on exhaustion
of server log file space, b) Allow dynamic setting of license e-mail address as
many sites are now removing the default administrator email address. This
release supports and has been tested with: 1) XWall version 3.42. 2) Third party
Exchange native AntiVirus solutions released through December of 2007. 3)
Exchange 2003 Service Pack 2 with or without Exchange 2003 hotfixes and rollups
through December of 2007.
·
10/15/2007 (Version 2.0.7653.117):
Fixed
customer issues with: a) Correct
buffer overflow issues with message processing. b) Invalid maintenance expiration
warnings once new license has been installed. c) All code and installer is now
cryptographically signed. This release supports and has been tested with: 1)
XWall version 3.41. 2) Third party Exchange native AntiVirus solutions released
through September of 2007. 3) Exchange 2003 Service Pack 2 with or without
Exchange 2003 hotfixes and rollups through September of 2007.
·
08/16/2007 (Version 2.0.7653.92):
Fixed
customer issues with: a) Correct
compatibility with changes made in some Exchange hotfixes (6.5.7653.x version
numbers) that caused intermittent behavior of XWALLFilter. b) Remove
previous XWALLFilter evaluation licenses that cause expiration warnings once a
permanent license is installed. This release supports and has been tested with:
1) XWall version 3.41. 2) Third party Exchange native AntiVirus solutions released
through July of 2007. 3) Exchange 2003 Service Pack 2 with or without Exchange
2003 hotfixes and rollups through July of 2007.
·
10/09/2006 (Version 2.0.7638.88):
Fixes
customer issues with: a) License acceptance when support is valid for more than one-year in the future. b) Expiration and
warning messages that occur incorrectly in some cases when a valid full license
is installed after a trial license was previously used.
Added a notification email to administrator@internal_dns_suffix if XWALLFilter
is installed but accidentally left unlicensed. This release supports and has been
tested with: 1) XWall version 3.38. 2) Third party
Exchange native AntiVirus solutions released through September of 2006. 3) Exchange
2003 Service Pack 2 with or without Exchange 2003 hotfixes through September of
2006.
·
08/08/2006 (Version 2.0.7638.62):
Enhanced
header scanning security. Fixes for compatibility with post Exchange 2003 SP2
hotfixes and recent third party Antivirus products. XWALLFilter is now
compatible in configurations which run IMF for additional spam filtering.
XWALLFilter logs to the Windows application event log to streamline product
troubleshooting and compatibility issues. Standardized install and uninstall
with all files stored below standard program files folder. Creation of program
group shortcuts for documentation and support. Integration with XWall 3.38 to
allow full function trial mode. Complete install and uninstall operation
logging for troubleshooting. Release supports and has been tested with: 1)
XWall version 3.38. 2) Third party Exchange native AntiVirus solutions released
through July of 2006. 3) Exchange 2003 Service Pack 2 with or without Exchange
2003 hotfixes through July of 2006.
·
03/28/2006 (Version 2.0.7233.77):
Point
release supports and has been tested with: 1) XWall version 3.36. 2) Third
party Exchange native AntiVirus solutions released through February of 2006. 3)
Exchange 2003 Service Pack 2 with or without Exchange 2003 hotfixes through
February of 2006.
·
08/01/2005 (Version 2.0.7233.14):
Point
release supports and has been tested with: 1) XWall version 3.33. 2) Third
party Exchange native AntiVirus solutions released through July of 2005. 3)
Exchange 2003 up to and including Service Pack 1 with or without Exchange 2003
hotfixes through July of 2005. 4) Changes for upcoming Exchange 2003 Service
Pack 2 and next release of DataEnter XWall.
·
02/11/2005 (Version 2.0.7232.21):
Updated
Installation Requirements and Troubleshooting sections of this document.
·
02/09/2005 (Version 2.0.7232.21):
Point
release supports: 1. New XWALL version 3.32. 2. Third party Exchange native
AntiVirus solutions released through January of 2005. 3. Exchange 2003 up to
and including Service Pack 1 with or without Exchange 2003 hotfixes through
January of 2005.
·
11/15/2004 (Version 2.0.7232.07):
Point
release supports: 1. Third party Exchange native AntiVirus solutions released
through October of 2004. 2. Exchange 2003 up to and including Service Pack 1
with or without Exchange 2003 hotfixes through October of 2004.
·
07/12/2004 (Version 2.0.7226.13):
Initial
Production Release supports: Exchange 2003 up to and including Service Pack 1
and Third party Exchange native AntiVirus solutions released through June of
2004.
Please visit our SUPPORT section at: http://www.XWALLFilter.com or email support@lakecomm.com. If writing us about a problem, please include any relevant XWALLFilter event log entries from the application event log and the XWALLFilter installation log available in C:\Program Files\XWALLFilter\XWALLFilter.log.