<<<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>>>


  Trend Micro, Inc.         		                January 09, 2004

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                ScanMail(TM) 2.6 for Lotus Notes(TM) Windows(TM)
                          Service Pack 1 Readme.txt
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  
  Notes: This readme file was current at the time of product release.
         However you should check for documentation updates at the Trend 
         Micro Web site: 

         http://www.trendmicro.com/download/ 


         You need to register online with Trend Micro within 30 days of 
         installation to continue downloading new pattern files  and
         product updates from the Trend Micro Web site. Register during
         installation or online at: 

         https://olr.trendmicro.com/registration/

     
     Contents
     ===================================================================
     1.  About ScanMail for Lotus Notes Windows
         - Who Should Install This Release
     2.  What's New
         - Resolved Known Issues (from Previous Versions)
     3.  Document Set
     4.  Recommended System Requirements
     5.  Installation
         - Installing a Control Manager Agent
         - Installing on a Partitioned Server
     6.  Post-Installation Configuration
         - Opening the ScanMail Console
         - Evaluation Version 
         - Configuring Visibility of the ScanMail Databases 
     7. Installing a Control Manager Agent
         A. Control Manager Agent System Requirements
         B. Public Key
         C. Installing the Control Manager Agent
            - Error installing the Control Manager agent
     8.  Known Issues
     9.  Release History
     10. Contact Information
     11. About Trend Micro
     12. License Agreement
         - OpenSSL License Agreement
     ===================================================================



1. About ScanMail for Lotus Notes Windows
========================================================================
ScanMail for Lotus Notes provides data security for your Lotus Notes
environment. ScanMail checks all email traffic, database replications,
and client file activity for viruses, malicious scripts and other data
threats particular to the Notes environment.

ScanMail can be managed through the Notes client, Web browser, or Trend
Micro Control Manager (TMCM), version 2.5 and later.

 Who Should Install This Release
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 This Service Pack contains enhancements and bug fixes introduced
 since the release of ScanMail for Lotus Notes 2.6 Patch 1
 (build 1278).

 Install this Service Pack if you are currently using ScanMail 2.6 for 
 Lotus Notes Windows.
 
 
2. What's New
========================================================================
ScanMail 2.6 for Lotus Notes, Service Pack 1 uses an updated pattern file 
numbering format: n.nnn.nn, where the first four digits are the pattern 
number and the last two digits are the build or controlled release 
version.  

Under the new system, pattern file 628, released in 2003, is displayed 
as 1.628.00. This new format has no impact on the product’s other 
virus scanning functions or on the functionality of other Trend Micro 
products still using the old format.  

Note: If you are using ScanMail in conjunction with Trend Micro Control
      Manager Version 2.5 or earlier, TMCM displays the pattern file 
      number using the 3-digit format. 


 Resolved Known Issues (from Previous Versions)
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 o Fixed an issue with scanning certain multipart MIME email attachments. 
 o Fixed an issue with text-file filtering when ScanMail was set for
   memory-based scanning.
 o Fixed an issue with inappropriate mail blocking when the spam filter
   was in use.
 o Fixed an issue with unexpected server shutdown when processing messages
   with certain header characteristics.
 o Fixed an issue with scanning single-MIME message attachments that could
   cause scanning to fail.
 o Fixed an issue with extension-based file blocking wherein UUencoded
   attachments could cause the Domino server to shut down unexpectedly.


3. Document Set
========================================================================
The documentation set for this product includes:

 o Readme.txt -- version enhancements, basic installation, known issues, 
   release history

 o Online help -- Context-sensitive help screens that provide guidance
   for performing a task

 o Getting Started Guide -- product overview, installation planning, 
   installation and configuration instructions, and basic information 
   intended to get you "up and running" 

   Electronic versions of the printed manuals are available at:

   http://www.trendmicro.com/download/

 o Knowledge Base -- a searchable database of known product issues, 
   including specific problem-solving and troubleshooting topics. 

   http://kb.trendmicro.com/solutions/default.asp


4. Recommended System Requirements
========================================================================
To use ScanMail 2.6 for Lotus Notes Windows, you need the following 
hardware and software:

  - Intel(TM) Pentium(TM) 1.2GHz CPU 
  - Windows(TM) 2000 or NT 4.0 with Service Pack 3 or later
  - 128MB RAM 
  - 50MB free disk space for program files
  - 500MB disk space for swap files
  - Lotus Notes version 5.0.3 or above
  - Internet access (for virus pattern file downloads)


5. Installation
========================================================================
If you are using this build to upgrade an existing instance of ScanMail
that is part of a Control Manager domain, you may also need to 
upgrade the Control Manager agent for ScanMail (See Section 7 for
more information).

To install ScanMail for Lotus Notes on a Windows server:

1. Stop the Notes/Domino server, and then:

   o If you have the Trend Micro Enterprise Protection CD, run "go.exe" 
     by inserting the CD into the CD-ROM drive.

   o If you downloaded ScanMail for Lotus Notes from the Trend Micro 
     Website, decompress the archive and then run "setup.exe" to begin
     the installation. 

2. The ScanMail Welcome window appears with the suggestion that you 
   quit any open applications. Click "Next" and then agree to the terms 
   of the License Agreement to proceed. 

3. ScanMail looks for your "notes.ini" file, typically located in:

   c:\lotus\domino\data\notes.ini for Domino 5.x. 

   If it was not found, click Browse to locate the directory. 

4. Click Next to proceed. Setup seeks the Notes "/program" and "/data" 
   directories. For Domino 5.x, the defaults are:

   c:\Lotus\Domino 
   c:\Lotus\Domino\data 

5. In the User Information window that appears, enter your name and 
   company name and click "Next". 

6. Enter the ScanMail serial number (which can be found on the front 
   cover of the Getting Started Guide or on the mail-in registration 
   card that comes in the ScanMail box). If you do not enter a serial 
   number, the 30-day trial version is installed. 

   Note: If you are updating an existing installation, there is no need 
         to enter a new serial number.  

7. Click "No" to sign the ScanMail databases using the current ID, or 
   "Yes" to select another. 

8. Unless you specify otherwise, ScanMail uses the following 
   directories for temp files:

    \Lotus\Domino\Data\smln\SMTemp\MailTemp\  -- Mail Scanner
    \Lotus\Domino\Data\smln\SMTemp\RepTemp\ -- Real-time Database Scanner
    \Lotus\Domino\Data\smln\SMTemp\DbTemp\ -- Manual Database Scanner
    \Lotus\Domino\Data\smln\SMTemp\PTemp\ -- Scheduled Database Scanner

9. Click "Finish" to complete the installation and view the Readme file.

10. Restart the Notes/Domino server to complete the installation.

    Control Manager Agent
    ~~~~~~~~~~~~~~~~~~~~~
    Setup prompts you to install the Trend Micro Control Manager  
    agent for ScanMail. See "Installing a Control Manager Agent" below
    for instructions. 

    Installing on a Partitioned Server
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    To install ScanMail on the first partitioned server, run Setup 
    as described above. When prompted for the location of your "notes.ini" 
    file, specify the one for the first partitioned server. Specify a 
    unique name for the data directory and temporary directories. For
    example:

     c:\lotus\domino\data1 

     \Lotus\Domino\Data1\smln\SMTemp\MailTemp\  --Mail Scanner
     \Lotus\Domino\Data1\smln\SMTemp\RepTemp\   --Real-time DB Scanner
     \Lotus\Domino\Data1\smln\SMTemp\DbTemp\    --Manual DB Scanner
     \Lotus\Domino\Data1\smln\SMTemp\PTemp\     --Scheduled DB Scanner

    Repeat the installation for each partitioned server that you have 
    installed. For example, locate the "notes.ini" for the second 
    partitioned server. 

    Note: When prompted, choose "Overwrite" to install on additional
    partitioned servers. Specify a unique name for each "data" and "temp"
    directory. For example:

     c:\lotus\domino\data2

     \Lotus\Domino\Data2\smln\SMTemp\MailTemp\  --Mail Scanner
     \Lotus\Domino\Data2\smln\SMTemp\RepTemp\   --Real-time DB Scanner
     \Lotus\Domino\Data2\smln\SMTemp\DbTemp\    --Manual DB Scanner
     \Lotus\Domino\Data2\smln\SMTemp\PTemp\     --Scheduled DB Scanner

 
6. Post-Installation Configuration
========================================================================
Add the ScanMail program icons to your workspace, set up access control restrictions, and update the virus pattern and scan engine files to 
ensure that you are protected against the latest threats.

For more information, see the Getting Started Guide, available at:

http://www.trendmicro.com/download/product.asp?productid=10

  Opening the ScanMail Console
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  Real-time email scanning is automatically enabled when the Domino server 
  is started. To start real-time database scanning, from the ScanMail
  console, go to Scan Options > Real-time Scan.

  Evaluation Version 
  ~~~~~~~~~~~~~~~~~~
  The evaluation version of ScanMail is fully functional, but must be
  registered and/or activated to prevent it from timing out. To upgrade,
  enter your serial number in the Register document (click Register in the 
  main ScanMail menu), then stop and restart the scanning services to 
  activate the changes. Then, in the Notes console, enter the following:
 
  tell tmmscan quit
  tell repscan quit

  load tmmscan
  load repscan

   
  Configuring the Visibility of the ScanMail Databases 
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  To configure visibility of the ScanMail databases in the Catalog and
  Open Database screens:

   1. Click "General Administration > Database Setting" to open the 
      Database Flags document. 
  
   2. Select the server you will administer.
  
   3. Select the viewing options for each of the ScanMail databases.
      The default is to display the databases in the Database Catalog
      and the Database Open Menu. The three options are:
     
      o Enable
      o Disable
      o Do not change          
    
   4. Choose whether to require an SSL connection when accessing the
      ScanMail databases from the Web. The default is to not require
      an SSL connection.
    
   5. Click "Apply Flag Settings" in the top menu bar to set the 
      database flags to complete the operation.


7. Installing a Control Manager Agent
=========================================================================
Trend Micro Control Manager allows you to remotely administer 
ScanMail and other supported Trend Micro products through a central 
product console. In addition, you can coordinate virus pattern file and 
other updates, notifications, and logging for disparate products. 

Key features:
   o  Centralized management, which allows administrators to configure, 
      monitor, and maintain Trend Micro programs - regardless of their 
      location or platform.

   o  Flexible, scalable configuration options to simplify your virus 
      and content security policy.
      
   o  Outbreak Commander, which provides proactive attack protection 
      service, blocking malicious code by file name and specific file 
      details while new pattern files are being developed to detect
      and clean new threats.

 A. Control Manager Agent System Requirements
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 To install the Control Manager agent for ScanMail, you need the 
 following minimum hardware and software on your Domino server:

   o  Intel(TM) Pentium(TM) 300MHz processor (PIII or faster recommended)
   o  128MB RAM (512MB recommended)
   o  50MB free disk space for the program files
   o  A Public Key (explained below)

 B. Public Key
 ~~~~~~~~~~~~~
 To generate a Public Key, 

 1. Open a Web browser and specify the URL for the Control Manager console, 
    for example:
   
    http://computer name/ControlManager
     
    where "computer name" is the IP address or host name of the Control 
    Manager server. 

 2. When prompted, enter a user ID with access-privileges and password. 
 3. Click "Products" in the top menu bar.
 4. Click "Add/Remove Product Agents".
 5. Right-click the public encryption key and select "Save As" to save the
    key on the ScanMail server (or, send it as an email attachment).

 C. Installing the Control Manager Agent
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 The Control Manager agent can be installed at the same time as ScanMail 
 2.6 or anytime thereafter.  

 Notes: 
 o For Domino partitioned servers, install a separate instance of the agent 
   on each partition.

 o The "Notesstat Key" must be removed or disabled in the Windows registry,
   or the following error message may display:

   "The dynamic link library js32.dll could not be found."

 To install the Control Manager agent:

 1.  Run the Control Manager agent Setup program, then click "Next" in the
     Welcome screen that appears. To continue, you must read and accept the
     License Agreement.
    
 2.  When prompted, specify the location of your "notes.ini" file,
     typically located in the "notes" directory and click "Next". The 
     Set Up Control Manager Agent screen appears.

 3.  Type the user ID for a Control Manager account on the Control Manager 
     server (the agent uses this account to log on to the Control Manager 
     server -- a system-administrator-level account is recommended).

     Hint: In the Control Manager console, ScanMail appears in a 
     branched directory once the agent has been registered. 

 4.  Next, identify the source of inbound messages to the agent:

     o Any host--no security; the agent will accept messages sent
                 to its port from any source.
 
     o IP port forwarding--choose this option if there is a firewall between 
                           the agent and Control Manager server. 

     o Proxy server--choose this option if there is a proxy server between 
                     the agent and Control Manager server. In addition, 
                     click "Proxy Server Configuration" and then 
                     type in the IP address (or host name), port, and logon
                     credentials (if any) for the proxy server.

 5.  Identify the route of outgoing messages from the agent to the
     Control Manager server: 

     o Direct to server -- Choose this if the agent will communicate 
                           directly with the Control Manager server. 
     o Proxy server  --  See #4, above .


 6.  Click "Next", and in the Register with Control Manager window that
     appears, click the "Import" button.  

 7.  Locate the Public Key you generated for secure Control Manager
     communications ("E2EPublic.dat") and click "Next" to continue. 
     ScanMail will finish Setup and then register the agent with the 
     Control Manager server.


  Error While Installing the Control Manager Agent
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  If the following error message occurs while installing the Control
  Manager agent, 

  "The dynamic link library js32.dll could not be found."

  remove the "Notesstat Key" from the Windows registry.

  To remove "Notesstat Key":
  1. Stop the Domino Server and then open a DOS window.
  2. At the DOS prompt, enter the following command to remove the 
     "Notesstatcounters" from the registry:

     unlodctr Notestat

  3. Start the Registry editor.

     Note that the "Notesstat Key" can found in two places in the Windows 
     registry:

     HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\notestat
     HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\
     Application\notestat

  4. Delete the entire key from both locations, then restart Windows 
     and the Domino server.


8. Known Issues
========================================================================
There are no known issues for this release.


9. Release History
========================================================================
Previous releases include the following:
   
 ScanMail 2.6, December 17, 2002
 ScanMail 2.6 Patch 1, June 16, 2003


10. Contact Information
========================================================================
A license to the Trend Micro Software usually includes the right to
product updates, pattern file updates, and basic technical support
for one (1) year from the date of purchase only. After the first 
year, Maintenance must be renewed on an annual basis at Trend Micro's 
then-current Maintenance fees.

Evaluation copies of all Trend Micro products can be downloaded from our 
Website. Contact Trend Micro via fax, phone, email, or visit us at:

http://www.trendmicro.com 

Global mailing address/telephone numbers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
For global contact information in the Asia/Pacific region, Australia
and New Zealand, Europe, Latin America, and Canada, refer to:

http://www.trendmicro.com/en/about/overview.htm
 

U.S. sales and support center
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
Sales:   +1-877-268-4847
Support: +1-888-608-1009


Corporate offices
~~~~~~~~~~~~~~~~~
Trend Micro Incorporated
10101 N. De Anza Blvd. 
Cupertino, CA 95014-9985

Tel: +1-408-257-1500
Fax: +1-408-257-2003

Note: These numbers are subject to change without notice. For the most
current contact information, visit:

http://www.trendmicro.com/en/support/contact.htm


Online resources
~~~~~~~~~~~~~~~~
Email: info@trendmicro.com
       sales@trendmicro.com

Knowledge Base: http://kb.trendmicro.com/solutions/


11. About Trend Micro  
========================================================================
Trend Micro, Inc. provides centrally controlled server-based virus 
protection and content-filtering products and services. By protecting 
information that flows through Internet gateways, email servers, and 
file servers, Trend Micro allows companies worldwide to stop viruses 
and other malicious code from a central point before they can reach 
the desktop.  

Copyright 2003-2004, Trend Micro Incorporated. All rights reserved.
Trend Micro, the t-ball logo, Control Manager, eManager, and ScanMail are 
trademarks of Trend Micro Incorporated and are registered in some 
jurisdictions. All other marks are the trademarks or registered trademarks 
of their respective companies.


12. License Agreement  
==========================================================================
Information about your license agreement with Trend Micro can be viewed at: 

 http://www.trendmicro.com/en/purchase/license/


OpenSSL License Agreement
~~~~~~~~~~~~~~~~~~~~~~~~~
Copyright (c) 1998-2001 The OpenSSL Project. All rights reserved. 
 
Redistribution and use in source and binary forms, with or without 
modification, are permitted provided that the following conditions 
are met: 
 
   1. Redistributions of source code must retain the above copyright 
   notice, this list of conditions and the following disclaimer. 
 
   2. Redistributions in binary form must reproduce the above copyright 
   notice, this list of conditions and the following disclaimer in 
   the documentation and/or other materials provided with the 
   distribution. 
 
   3. All advertising materials mentioning features or use of this 
   software must display the following acknowledgment: 
   "This product includes software developed by the OpenSSL Project 
   for use in the OpenSSL Toolkit. (http://www.openssl.org/)" 
 
   4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be 
   used to endorse or promote products derived from this software 
   without prior written permission. For written permission, please 
   contact openssl-core@openssl.org. 
  
   5. Products derived from this software may not be called "OpenSSL" 
   nor may "OpenSSL" appear in their names without prior written 
   permission of the OpenSSL Project. 
 
   6. Redistributions of any form whatsoever must retain the following 
   acknowledgment: 
   "This product includes software developed by the OpenSSL Project 
   for use in the OpenSSL Toolkit (http://www.openssl.org/)" 
  
   THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 
   EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
   IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
   PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 
   ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 
   NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 
   LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
   HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 
   STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 
   OF THE POSSIBILITY OF SUCH DAMAGE. 
   ==================================================================== 
  
   This product includes cryptographic software written by Eric Young 
   (eay@cryptsoft.com). This product includes software written by Tim 
   Hudson (tjh@cryptsoft.com). 


   Original SSLeay License 
   ~~~~~~~~~~~~~~~~~~~~~~~

   Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 
   All rights reserved. 
  
   This package is an SSL implementation written 
   by Eric Young (eay@cryptsoft.com). 
   The implementation was written so as to conform with Netscape's SSL. 
  
   This library is free for commercial and non-commercial use as long  
   as the following conditions are adhered to. The following conditions 
   apply to all code found in this distribution, be it the RC4, RSA, 
   lhash, DES, etc., code; not just the SSL code. The SSL documentation 
   included with this distribution is covered by the same copyright
   terms except that the holder is Tim Hudson (tjh@cryptsoft.com). 
  
   Copyright remains Eric Young's, and as such any Copyright notices in 
   the code are not to be removed. 
   If this package is used in a product, Eric Young should be given  
   attribution as the author of the parts of the library used. 
   This can be in the form of a textual message at program startup or 
   in documentation (online or textual) provided with the package. 
  
   Redistribution and use in source and binary forms, with or without 
   modification, are permitted provided that the following conditions 
   are met: 
   1. Redistributions of source code must retain the copyright 
   notice, this list of conditions and the following disclaimer. 
   2. Redistributions in binary form must reproduce the above copyright 
   notice, this list of conditions and the following disclaimer in the 
   documentation and/or other materials provided with the distribution. 
   3. All advertising materials mentioning features or use of this  
   software must display the following acknowledgement: 
   "This product includes cryptographic software written by 
   Eric Young (eay@cryptsoft.com)" 
   The word 'cryptographic' can be left out if the routines from the 
   library being used are not cryptographic related. 
   4. If you include any Windows specific code (or a derivative 
   thereof) from the apps directory (application code) you must include
   an acknowledgement: 
  
 "This product includes software written by Tim Hudson 
   (tjh@cryptsoft.com)" 
  
   THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND 
   ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 
   THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A 
   PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR 
   CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, 
   EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, 
   PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 
   PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY 
   OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 
   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE 
   USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
   DAMAGE. 
  
   The license and distribution terms for any publicly available 
   version or derivative of this code cannot be changed. i.e. this code 
   cannot simply be copied and put under another distribution license 
   [including the GNU Public License.] 




