<<<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>>>


  Trend Micro, Inc.         		                December 19, 2003

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
                ScanMail(TM) 2.6 for Lotus Notes(TM) Solaris(TM)
                          Service Pack 1 Readme.txt
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  
  Notes: This readme file was current at the time of product release.
         However you should check for documentation updates at the Trend 
         Micro Web site: 

         http://www.trendmicro.com/download/ 


         You need to register online with Trend Micro within 30 days of 
         installation to continue downloading new pattern files and
         product updates from the Trend Micro Web site. Register during
         installation or online at: 

         https://olr.trendmicro.com/registration/

     
     Contents
     ===================================================================
     1.  About ScanMail for Lotus Notes Solaris
         - Who Should Install This Release
     2.  What's New
         - Resolved Known Issues (from Previous Versions)
     3.  Document Set
     4.  Recommended System Requirements
     5.  Installation
         - Control Manager Agent
         - Installing on a Partitioned Server
     6.  Post-Installation Configuration
         - Opening the ScanMail Console
         - Evaluation Version 
         - Configuring the Visibility of ScanMail Databases
     7. Installing a Control Manager Agent
         A. Control Manager Agent System Requirements
         B. Public Key
         C. Installing the Control Manager Agent
         D. Removing the Control Manager Agent
     8.  Known Issues
         - Content Filter: Using Operators in Expressions
         - eManager and Filter Rules  
     9.  Release History
     10. Contact Information
     11. About Trend Micro
     12. License Agreement
         - OpenSSL License Agreement
     ===================================================================



1. About ScanMail for Lotus Notes Solaris
========================================================================
ScanMail for Lotus Notes provides data security for your Lotus Notes
environment. ScanMail checks all email traffic, database replications,
and client file activity for viruses, malicious scripts and other data
threats particular to the Notes environment.

ScanMail can be managed through the Notes client, Web browser, or Trend
Micro Control Manager (TMCM), version 2.5 and later.

 Who Should Install This Release
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 This Service Pack contains enhancements and bug fixes introduced since
 the release of ScanMail for Lotus Notes 2.6 (build 1248).

 Install this Service Pack if you are currently using ScanMail 2.6 for 
 Lotus Notes Solaris.
 
 
2. What's New
========================================================================
ScanMail 2.6 for Lotus Notes, Service Pack 1 uses an updated pattern file 
numbering format: n.nnn.nn, where the first four digits are the pattern 
number and the last two digits are the build or controlled release 
version.  

Under the new system, pattern file 628, released in 2003, is displayed 
as 1.628.00. This new format has no impact on the products other 
virus scanning functions or on the functionality of other Trend Micro 
products still using the old format.  

Note: If you are using ScanMail in conjunction with Trend Micro Control
      Manager Version 2.5 or earlier, TMCM displays the pattern file 
      number using the 3-digit format. 


 Resolved Known Issues (from Previous Versions)
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 o Fixed an issue with scanning certain multipart MIME email attachments. 
 o Fixed an issue with text-file filtering when ScanMail was set for
   memory-based scanning.
 o Fixed an issue with inappropriate mail blocking when the spam filter
   was in use.
 o Fixed an issue with unexpected server shutdown when processing messages
   with certain header characteristics.
 o Fixed an issue with scanning single-MIME message attachments that could
   cause scanning to fail.
 o Fixed an issue with unexpected server shutdown when scanning the mail
   body.


3. Document Set
========================================================================
The documentation set for this product includes:

 o Readme.txt -- version enhancements, basic installation, known issues, 
   release history

 o Online help -- Context-sensitive help screens that provide guidance
   for performing a task

 o Getting Started Guide -- product overview, installation planning, 
   installation and configuration instructions, and basic information 
   intended to get you "up and running"    

   Electronic versions of the printed manuals are available at:

   http://www.trendmicro.com/download/

 o Knowledge Base -- a searchable database of known product issues, 
   including specific problem-solving and troubleshooting topics. 

   http://kb.trendmicro.com/solutions/default.asp


4. Recommended System Requirements
========================================================================
To use ScanMail 2.6 for Lotus Notes Solaris, you need the following hardware and
software:

  - Solaris(TM) 2.5.1 or later
  - 256MB RAM (64MB minimum)
  - 50MB free disk space for program files
  - 500MB disk space for swap files (100MB minimum)
  - Lotus Notes version 5.0.3 or above
  - Internet access (for virus pattern file downloads)


5. Installation
========================================================================
Pre-installation Notes:

o You must be logged in to the Solaris server as root to install 
  ScanMail. 

o If you are using this build to upgrade an existing instance of ScanMail
  that is part of a Control Manager domain, you may also need to upgrade 
  the Control Manager agent for ScanMail (See Section 7 for more 
  information).

o ScanMail automatically installs its program databases and accompanying
  files to the Notes Data directory on the server.

o For partitioned servers, install a copy of ScanMail on each partition.
  Be sure not to use the same "/temp" directory for each instance of 
  ScanMail you install. 


To install ScanMail:

 1. Copy the following ScanMail file from the installation media to
    any directory on the Domino server:

    "vlotus.tz" -- compressed program files
    "sminst" -- installation script 
    "license" -- the License Agreement 

 2. Change to the directory containing the ScanMail files and type the 
    following:

    # ./smcminst

    Alternatively, if you want ScanMail to install without prompting for 
    any user input, a so-called "silent install", enter the following:

     ./sminst install -s /%path%/settings.dat"

    (Note: "sminst" must be executable--if not, enter "chmod 555 sminst")

   
 3. Enter the ScanMail serial number, which can be found on the front 
    cover of the Getting Started Guide or obtained via email from 
    Trend Micro:          
    
       sales@trendmicro.com


 4. Press Enter to accept the default ScanMail temporary directories 
    or type the path that you want ScanMail to use. 

    Note: If you are running ServerProtect or other antivirus software 
          on the Domino server hosting ScanMail for Lotus Notes, be
          sure to exclude the ScanMail "temp" directories from being 
          scanned by that software or a scanning conflict can occur.

  5. Restart the Domino server before running ScanMail.


 Control Manager Agent
 ~~~~~~~~~~~~~~~~~~~~~
 Setup prompts you to install the Trend Micro Control Manager agent 
 for ScanMail. See "Installing a Control Manager Agent" below for
 instructions. 

 Installing on a Partitioned Server
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 To install ScanMail on the first partitioned server, follow the
 installation prompts. Locate the "notes.ini" file for the first 
 partitioned server. Specify a unique name for the data directory and 
 temporary directories. For example,

 /local/notesdata1  

 /local/notesdata1/smln/SMTemp/MailTemp/  -- Mail Scanner
 /local/notesdata1/smln/SMTemp/RepTemp/ -- Real-time Database Scanner
 /local/notesdata1/smln/SMTemp/DbTemp/ -- Manual Database Scanner
 /local/notesdata1/smln/SMTemp/PTemp/ -- Scheduled Database Scanner

 Be sure to use a different "temp" directory for each installation of
 ScanMail-- do not use the same directory for all partitions. Repeat 
 the installation for each partitioned server you have installed. 

 For example, locate the "notes.ini" for the second partitioned server. 
 You will be prompted whether you would like to "Overwrite" the previous
 installation. You must choose "Overwrite" to install to additional 
 partitioned servers. 

 Specify a unique name for the data directory and temporary directories
 for each partitioned server. For example,

 /local/notesdata2 

 /local/notesdata2/smln/SMTemp/MailTemp/  -- Mail Scanner
 /local/notesdata2/smln/SMTemp/RepTemp/ -- Real-time Database Scanner
 /local/notesdata2/smln/SMTemp/DbTemp/ -- Manual Database Scanner
 /local/notesdata2/smln/SMTemp/PTemp/ -- Scheduled Database Scanner

 Note: The program directory is the same and shared by all partitions.
 However, be sure not to use the same "temp" directory for multiple
 installations.
 

6. Post-Installation Configuration
========================================================================
Add the ScanMail program icons to your workspace, set up access control restrictions, and update the virus pattern and scan engine files to 
ensure that you are protected against the latest threats.

For more information, see the Getting Started Guide, available at:

http://www.trendmicro.com/download/product.asp?productid=10

  Opening the ScanMail Console
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  ScanMail's real-time email scanning function is automatically enabled  
  when the Domino server is started. To start real-time database scanning,
  from the main ScanMail navigation screen, go to Scan Options > Real-time
  Scan.


  Evaluation Version 
  ~~~~~~~~~~~~~~~~~~
  The evaluation version of ScanMail is fully functional, but must be
  registered and/or activated to prevent it from timing out. To upgrade,
  enter your serial number in the Register document (click Register in the 
  main ScanMail menu), then stop and restart the scanning services to 
  activate the changes. Then, in the Notes console, enter the following:
  
  tell tmmscan quit
  tell repscan quit

  load tmmscan
  load repscan

    
  Configuring the Visibility of the ScanMail Databases 
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  To configure visibility of the ScanMail databases in the Catalog
  and Open Database screens, or to set the Replication status:

    1. Click "General Administration > Database Setting" to open
       the Database Flags document. 
  
    2. Select the server you will administer.
  
    3. Select Viewing and Replication options for each of the ScanMail
       databases (default setting are indicated below): 

        - Show in "Open Database" Dialog      (enabled) 		
        - List in Database Catalog            (disabled)
        - Web access: Require SSL connection  (disabled)
        - Replication                         (disabled)
     
    4. Select whether to require an SSL connection when accessing the
       ScanMail databases from the Web. The default is to not require
       an SSL connection.
     
    5. Click "Apply Flag Settings" in the top menu bar to set the 
       database flags.


7. Installing a Control Manager Agent
=========================================================================
Trend Micro Control Manager allows you to remotely administer 
ScanMail and other supported Trend Micro products through a central product console. In addition, you can coordinate virus pattern file and 
other updates, notifications, and logging for disparate products. 

Key features:
   o  Centralized management, which allows administrators to configure, 
      monitor, and maintain Trend Micro programs - regardless of their 
      location or platform.

   o  Flexible, scalable configuration options to simplify your virus 
      and content security policy.
      
   o  Outbreak Commander, which provides proactive attack protection 
      service, blocking malicious code by file name and specific file 
      details while new pattern files are being developed to detect
      and clean new threats.

 A. Control Manager Agent System Requirements
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 To install the Control Manager 2.5 agent for ScanMail, you need the 
 following minimum hardware and software on your Domino server:

   o  Solaris 2.5.1 or later
   o  128MB RAM (256MB recommended)
   o  50MB free disk space 
   o  A Public Key (explained below)

 B. Public Key
 ~~~~~~~~~~~~~
 To generate a Public Key, 

 1. Open a Web browser and specify the URL for the Control Manager console, 
    for example:
   
    http://computer name/ControlManager
     
    where "computer name" is the IP address or host name of the Control 
    Manager server. 

 2. When prompted, enter a user ID with access-privileges and password. 
 3. Click "Products" in the top menu bar.
 4. Click "Add/Remove Product Agents".
 5. Right-click the public encryption key and select "Save As" to save the
    key on the ScanMail server (or, send it as an email attachment).

 C. Installing the Control Manager Agent
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 The Control Manager agent can be installed at the same time as ScanMail 
 2.6, or anytime thereafter.  

 Notes: 
 o The Domino server must be running to install the agent (it must be
   stopped to install ScanMail 2.6).
 
 o You will be prompted to log on to the Control Manager server using 
   a root-level account.

 o For Domino partitioned servers, install a separate instance of the 
   agent on each partition.

 o Uninstall any existing Trend VCS agent before installing the Control 
   Manager 2.5 agent on a Domino server.

 o The "Server.id" for the Domino server where you will install the agent
   should not have a password. 


To install the Control Manager agent:

 1. Decompress the archive to a "temp" directory, change to that directory, 
    and type the following command to run the install script:

    # ./smcminst

    Alternatively, if you want ScanMail to install without prompting for 
    any user input, a so-called "silent install", enter the following:

     # ./smcminst install -s /%path%/settings.dat"

    (Note: "smcminst" must be executable--if not, enter "chmod 555 
           smcminst" )

 2. If you chose not to perform a silent install, the following menu 
    appears:

      1 ..... Install Control Manager agent for ScanMail 2.6
      2 ..... Uninstall Control Manager agent for ScanMail 2.6

    Type "1" to begin installing. By default, the agent installs to the
    "/opt/trend" directory, or you can choose another directory when
    prompted.

 3. Next, identify the location of your "notes.ini" file and press Enter 
    to continue. Setup previews your selected install directories,
    checks available disk space, and begins copying files. 

 4. To register the agent with your Control Manager server, type the 
    IP address or host name of that TMCM server and press Enter. 
    Alternatively, if you have a public key, specify the location of the
    "E2Epublic.dat" file.

 5. When prompted, log on to the Control Manager server using a 
    root-level account to open the connection. 

 6. The agent appears in the Control Manager console along with any 
    other agents you have previously installed. Type the name you want to 
    use to identify this agent in the list. 

 7. The Setup program ends after the agent and server connection has 
    been established. To see the agent and confirm that the installation 
    was a success, open the Control Manager console and begin accessing 
    ScanMail from the agent you just installed.


 D. Removing the Control Manager Agent
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 Notes: 
 o If you remove ScanMail, be sure to remove the Control Manager
   agent first. 

 o The Domino server on the agent machine must be running.  

 To remove the Control Manager agent from the ScanMail server,
 1. Start the uninstall script: 
 
    # ./smcminst

 2. Choose option 2 in the menu that appears:

    1 ..... Install Control Manager agent for ScanMail 2.6
    2 ..... Uninstall Control Manager agent for ScanMail 2.6

 3. Confirm the location of your "notes.ini" file, typically in the 
    "/local/notesdata/notes.ini" directory, or specify another location.

 4. The agent uninstall script automatically stops the daemon and removes
    all installed agent files.


8. Known Issues
========================================================================
 o Content Filter: Using Operators in Expressions
   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   When writing expressions, be sure to include a space before and after
   each dot, for example 
    
    .WILD. *expression*  
    .(. OCCUR test .).
    
   Failure to include the space can result in the expression being misread
   by eManager or the server shutting down. 

 o eManager and Filter Rules    
   ~~~~~~~~~~~~~~~~~~~~~~~~~
   When including eManager functionality in a filter rule, be sure "Enable 
   eManager Functionality" is enabled and that at least one content filter
   has been specified for the Selected Content Filter field. 

   If you do not to enable eManager functionality and include one or more
   content filters, the result may be an initialization error or server 
   shutdown.
    
   [From the main ScanMail menu, choose Scan Options > eManager/ Filter 
   Rules. Click "Filter Rules" and then click the "Create new rule" button 
   (or open an existing filter rule). Scroll to the middle of the page and 
   click eManager Functionality to expose the options discussed above.]
   

 o Additional known issues are documented in "Knowledge Base," the Trend
   Micro technical support knowledge base: 

   http://kb.trendmicro.com/solutions/default.asp


9. Release History
========================================================================
Previous releases include the following:
   
 ScanMail 2.6, April 15, 2003


10. Contact Information
========================================================================
A license to the Trend Micro Software usually includes the right to
product updates, pattern file updates, and basic technical support
for one (1) year from the date of purchase only. After the first 
year, Maintenance must be renewed on an annual basis at Trend Micro's 
then-current Maintenance fees.

Evaluation copies of all Trend Micro products can be downloaded from our 
Web site. Contact Trend Micro via fax, phone, email, or visit us at:

http://www.trendmicro.com 

Global mailing address/telephone numbers
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
For global contact information in the Asia/Pacific region, Australia
and New Zealand, Europe, Latin America, and Canada, refer to:

http://www.trendmicro.com/en/about/overview.htm
 

U.S. sales and support center
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
Sales:   +1-877-268-4847
Support: +1-888-608-1009


Corporate offices
~~~~~~~~~~~~~~~~~ 
Trend Micro Incorporated
10101 N. De Anza Blvd. 
Cupertino, CA 95014-9985

Tel: +1-408-257-1500
Fax: +1-408-257-2003

Note: These numbers are subject to change without notice. For the most
current contact information, visit:

http://www.trendmicro.com/en/support/contact.htm


Online resources
~~~~~~~~~~~~~~~~
Email: info@trendmicro.com
       sales@trendmicro.com

Knowledge Base: http://kb.trendmicro.com/solutions/default.asp


11. About Trend Micro  
========================================================================
Trend Micro, Inc. provides centrally controlled server-based virus 
protection and content-filtering products and services. By protecting 
information that flows through Internet gateways, email servers, and 
file servers, Trend Micro allows companies worldwide to stop viruses 
and other malicious code from a central point before they can reach 
the desktop.  

Copyright 2003-2004, Trend Micro Incorporated. All rights reserved.
Trend Micro, the t-ball logo, Control Manager, eManager, and ScanMail are 
trademarks of Trend Micro Incorporated and are registered in some 
jurisdictions. All other marks are the trademarks or registered trademarks 
of their respective companies.


12. License Agreement  
==========================================================================
Information about your license agreement with Trend Micro can be viewed at: 

http://www.trendmicro.com/en/purchase/license/overview.htm


OpenSSL License Agreement
~~~~~~~~~~~~~~~~~~~~~~~~~
Copyright (c) 1998-2001 The OpenSSL Project. All rights reserved. 
 
Redistribution and use in source and binary forms, with or without 
modification, are permitted provided that the following conditions 
are met: 
 
   1. Redistributions of source code must retain the above copyright 
   notice, this list of conditions and the following disclaimer. 
 
   2. Redistributions in binary form must reproduce the above copyright 
   notice, this list of conditions and the following disclaimer in 
   the documentation and/or other materials provided with the 
   distribution. 
 
   3. All advertising materials mentioning features or use of this 
   software must display the following acknowledgment: 
   "This product includes software developed by the OpenSSL Project 
   for use in the OpenSSL Toolkit. (http://www.openssl.org/)" 
 
   4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be 
   used to endorse or promote products derived from this software 
   without prior written permission. For written permission, please 
   contact openssl-core@openssl.org. 
  
   5. Products derived from this software may not be called "OpenSSL" 
   nor may "OpenSSL" appear in their names without prior written 
   permission of the OpenSSL Project. 
 
   6. Redistributions of any form whatsoever must retain the following 
   acknowledgment: 
   "This product includes software developed by the OpenSSL Project 
   for use in the OpenSSL Toolkit (http://www.openssl.org/)" 
  
   THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 
   EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
   IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
   PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 
   ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 
   SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 
   NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 
   LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
   HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 
   STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
   ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 
   OF THE POSSIBILITY OF SUCH DAMAGE. 
   ==================================================================== 
  
   This product includes cryptographic software written by Eric Young 
   (eay@cryptsoft.com). This product includes software written by Tim 
   Hudson (tjh@cryptsoft.com). 


   Original SSLeay License 
   ~~~~~~~~~~~~~~~~~~~~~~~

   Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 
   All rights reserved. 
  
   This package is an SSL implementation written 
   by Eric Young (eay@cryptsoft.com). 
   The implementation was written so as to conform with Netscape's SSL. 
  
   This library is free for commercial and non-commercial use as long  
   as the following conditions are adhered to. The following conditions 
   apply to all code found in this distribution, be it the RC4, RSA, 
   lhash, DES, etc., code; not just the SSL code. The SSL documentation 
   included with this distribution is covered by the same copyright
   terms except that the holder is Tim Hudson (tjh@cryptsoft.com). 
  
   Copyright remains Eric Young's, and as such any Copyright notices in 
   the code are not to be removed. 
   If this package is used in a product, Eric Young should be given  
   attribution as the author of the parts of the library used. 
   This can be in the form of a textual message at program startup or 
   in documentation (online or textual) provided with the package. 
  
   Redistribution and use in source and binary forms, with or without 
   modification, are permitted provided that the following conditions 
   are met: 
   1. Redistributions of source code must retain the copyright 
   notice, this list of conditions and the following disclaimer. 
   2. Redistributions in binary form must reproduce the above copyright 
   notice, this list of conditions and the following disclaimer in the 
   documentation and/or other materials provided with the distribution. 
   3. All advertising materials mentioning features or use of this  
   software must display the following acknowledgement: 
   "This product includes cryptographic software written by 
   Eric Young (eay@cryptsoft.com)" 
   The word 'cryptographic' can be left out if the routines from the 
   library being used are not cryptographic related. 
   4. If you include any Windows specific code (or a derivative 
   thereof) from the apps directory (application code) you must include
   an acknowledgement: 
  
 "This product includes software written by Tim Hudson 
   (tjh@cryptsoft.com)" 
  
   THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND 
   ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, 
   THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A 
   PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR 
   CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, 
   EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, 
   PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 
   PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY 
   OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 
   (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE 
   USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
   DAMAGE. 
  
   The license and distribution terms for any publicly available 
   version or derivative of this code cannot be changed. i.e. this code 
   cannot simply be copied and put under another distribution license 
   [including the GNU Public License.] 




