Bypassed users can now accept domain names besides email addresses
New filter added to block top level domains like *.TOP, *.XYZ, etc...
New filter to detect fake replies
New filter to detect inconsistent "Reply-To" header.
Message counts are consolidated across slaves when running Xeams in clustered mode
Version 5.6 build 5894
January 05, 2017
modified for Live Monitor. If your browser has cached an older version, you will see a blank screen when trying to use
Live Monitor. Refreshing the page will solve the problem.
User Import Wizard now contains the ability to import associated emails from a text file
DRV caching can optionally be disabled.
Live Monitor can display more than 20 records, which is done by adding num.entries.in.livemonitor property in server.properties file.
Reporting is improved to consume less memory
A new Diagnostic Check is introduced to ensure Xeams does not accept emails for invalid users.
A major memory leak is fixed that occurs when Xeams is configured to run as a SLAVE in clustering environment
When messages are searched by non-admin users, records are not pulled from SLAVES. Applies when running in a clustered environment.
Version 5.5 build 5884
December 14, 2016
User Quarantine Reports are generated even when running in Stand-alone mode
When subject are changed in message action, emails are copied to INBOX, instead of Spam/Possible Spam folders, allowing POP3 clients to see these messages. This applies only if you are using POP3/IMAP on Xeams.
User white/black list (Buddy/Enemy) list can be read from a CSV file, allowing administrators to import white/black list from third-party sources. Click here for details.
Filtering is enhanced to detect and score messages containing incorrect base64 encoding to avoid detection
Ability to read IP addresses for Office365 from a file instead of fetching them from the Internet. Applies when grey-listing is enabled.
Version 5.4 build 5878
November 16, 2016
Read/Unread flag does not work in iPhone when using IMAP
Flag to check/uncheck Temporary emails does not work in web interface.
Version 5.4 build 5876
November 08, 2016
Ability to create temporary email addresses. Click here for details.
Clustering has been enhanced. Files are compresses before sending them to slaves, making them work faster on slower networks.
Outbound SMTP server communication has been improved to handle temporary failures.
Version 5.4 build 5872
November 03, 2016
Dynamic Recipient Verification is introduced. Click here for details.
Domain names for SMTP Configuration is now paginated, making it easier to maintain lots of domain names
Anti-virus rule is updated
Manage Aliases is now called Manage Distribution List under Server Configuration. Check this page for details.
Trusted domain is not added when marking emails if there are multiple TXT records in the DNS server.
Version 5.3 build 5868
October 24, 2016
Ability to bypass users for spam filtering, which also saves you a user-license. Click here for details.
Version 5.3 build 5867
October 21, 2016
Ability to see how Xeams calculates actual users
Implements licensing policy that gives users 90 days to make a decision instead of original 30.
Version 5.3 build 5865
October 19, 2016
Ability to check with Active Directory for Smtp Proxy Server
Allows a 15-day grace period if the "Active Users" count goes higher than the purchased licenses
The About screen is blank when Multi-Profile option is enabled, but no profile other than Default exists.
Clustering does not work when CSRF prevention is enabled.
Version 5.3 build 5864
October 14, 2016
POPFetch now supports SSL
Version 5.3 build 5862
October 12, 2016
Ability to add new RBL servers
Smart Host does not work when SMTP Proxy is set to Asynchronous mode.
Clustering does not work when CSRF prevention is enabled.
Version 5.3 build 5859
October 05, 2016
Incoming messages are not received if Smart Host is enabled and SMTP Proxy server is configured to run in Asynchronous mode.
Version 5.3 build 5858
October 04, 2016
Xeams Clustering, which allows junk filtering rules to be shared between multiple instances of Xeams.
Virus Detector has been improved to catch tricks used by spammers to hide attached file name.
Grey listing filter can now accept wildcards. For example: *.linkedin.com
A global report recipient can be specified. Daily summary reports for quarantined messages will be sent to this global user besides the actual user.
POP3 server does not return OK status for the LIST command where there are no messages.
Version 5.2 build 5848
September 22, 2016
DKIM is now supported for both inbound and outbound messages. Click here for details.
Version 5.1 build 5842
September 13, 2016
Ability to generate quarantine report by send an email. Click here for details.
Not every country is displayed in the country filter.
Version 5.1 build 5840
September 06, 2016
Ability to send/receive large files Click here for details.
Bypassed IP addresses for Office365 has been updated. This affects Grey Listing
Version 5.0 build 5836
August 26, 2016
Xeams is unable to process encrypted zipped files.
The web interface keeps displaying latest news even when it is marked read.
Version 5.0 build 5834
August 18, 2016
Ability to peek into an attached zipped file right from Xeam's web interface.
Since this is done without downloading, you can safely check if an attached zip file contains a virus.
Non-admin users can now view messages for more than 1 day. The number of days match with what administrators see.
Number of days since data is displayed for users is incorrect.
User Filter screen displays a blank page.
Version 5.0 build 5832
August 15, 2016
OutBoundQueue Manager is added under Message Repository allowing administrators to manage messages stuck in the Outbound Queue
User's screen is paginated
Ability to search users on the user's screen
Viewing messages has been improved.
Administrator's can run an email through Spam Simulator while viewing a message.
Embedded images referring to a foreign website are hidden by default, which prevents activation of a web-bug
Xeams attempts to fix incoming messages containing UNICODE characters in the header.
Trailing spaces in a folder name are removed in the IMAP server
Version 4.9 build 5825
May 13, 2016
Inconsistent sender filter is updated to ignore SPF checking
MS-Office macro filter can not look for *.dot files
Outbound messages can be forced through a specific IP if required
The ReverseIPLookup rule is updated to ignore IP addresses listed in Gateway.dat
The HoneyPot is updated to ignore IP addresses in Gateway.dat
Version 4.9 build 5816
April 05, 2016
SMTP Auth does not work with SSL
Version 4.9 build 5815
April 04, 2016
A new custom rule added to detect emails from fake stores, such as Amazon, Kohl's & Costco.
The rule to detect macros in MS Word/Excel is updated
Version 4.9 build 5811
March 29, 2016
STARTTLS now works for out-bound emails.
Version 4.9 build 5810
March 28, 2016
User Repository for IMAP/POP3 is now separate from global repository.
IDLE command now support for IMAP server
A new custom filter has been added that looks for macros in an MS Word/Excel document.
The Virus Detection filter has been updated to look for Crypto/Locky virus.
Version 4.8 build 5800
December 07, 2015
Administrators can set a max score for daily reports. This limits the number of entries that
appear in the daily report hiding emails scoring higher than a pre-configured threshold
Updated DNS lookups, which improves how SPF, RBL and any other DNS based lookups are performed
Enhancements in SPF lookup logic
Integration with ClamAV is improved
Incoming email occasionally gets corrupted when an email body contains a DOT in the beginning of a line.
Some buttons are drawn with a very light color when web interface is viewed in Internet Explorer.
Version 4.8 build 5792
June 25, 2015
Pie charts on the home page of the Admin Console are no longer scary :-)
Web page does not render correctly when Intranet Compatibility Mode is enabled in Internet Explorer.
Version 4.8 build 5790
June 23, 2015
Check boxes are not visible when marking messages
Version 4.8 build 5789
June 22, 2015
Live logs - ability to see log files as they are being written
STARTTLS is now supported for SMTP Proxy Server
New screen for ClamAV integration, which can also perform a test against a ClamAV daemon
Completely redesigned web interface, which is responsive for mobile devices
White/black list belong to users is automatically imported when a new user based on AD is created
Live Monitor now contains a time column
Embedded web server is upgraded, which disables SSLv3.
Custom filter reports can display messages that were affected by the selected filter.
Grey Listing filter has been enhanced. Administrators can now exclude IP addresses. Addresses belonging to Office365 are automatically excluded
Attached zipped files were being ignored when file names were encoded
Version 4.7 build 5780
April 02, 2015
Live Monitor gets a new facelift. A new AJAX bases live monitor replaces the old Java Applet that stopped working on newer browsers.
New users can be created by pulling accounts from Active Directory
A new custom rule has been added to detect WebBug Images
Version 4.7 build 5776
March 22, 2015
User reports no longer contain Data URI Scheme to display images.
Instead, contentID is used to display graphs. MS Outlook does not support Data URI Scheme yet and therefore, graphs were not visible in user
report when using MS Outlook.
Emails with zip files are not getting delivered. This bug only applies to older installations that use JRE 1.6. It
does not affect JRE 1.7. Alternatively, visit this page for instructions on how to update
Version 4.7 build 5775
March 17, 2015
Some of the hyper links in the web interface were broken and resulted in a 404 error.
Ability for users to search older messages. This is done when users login using their credentials
Ability to display more than 3 days of messages when viewing all
Email quarantine report sent to users is no longer cumulative - meaning if users are configured to receive more than one report per day, the
data for next report contains records since the last report, rather than from midnight.
Many email readers do not display images from a remote server, preventing the graph to appear in email report.
This graph is now embedded inside the email itself and will be visible through any email reader.