--- cdrom.image/sme9/README.txt	2016/09/27 19:56:16	1.21
+++ cdrom.image/sme9/README.txt	2016/10/08 09:53:48	1.22
@@ -1,10 +1,10 @@
-Koozali SME Server 9.2 Beta 1 Release Notes
+Koozali SME Server 9.2 Beta1 Release Notes
 ===========================================
 
-27 September 2016
+10 October 2016
 
 The Koozali SME Server (SME Server) development team is pleased to announce
-the release of SME Server 9.2 Beta 1 which is based on CentOS 6.8
+the release of SME Server 9.2 Beta1 which is based on CentOS 6.8
 
 Bug reports and reports of potential bugs should be raised in the bug
 tracker (and only there, please);
@@ -14,7 +14,7 @@ tracker (and only there, please);
 Download
 ========
 
-You can download Koozali SME Server 9.2 Beta 1 from
+You can download Koozali SME Server 9.2 Beta1 from
 http://mirror.contribs.org/smeserver/releases/testing/9.2.beta1/
 or for other methods see http://wiki.contribs.org/SME_Server:Download
 
@@ -68,7 +68,7 @@ http://wiki.contribs.org/Install_From_US
 Major changes in this release
 =============================
 
-Major Changes in this release. LDAP - Hook into the new ssl-update event, Mail Server - Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default), Modify whitelist_soft transaction to interact with dnsbl filter, Revert forcing TLSv1 patch as it breaks some inbound delivery, Remove karma rcpt handling, Check rua is defined before trying to parse it to prevent an error if a domain has a DMARC entry published with no rua, add support for the uribl plugin, add detailed spamassassin report headers. Server Manager - Allow access to the server-manager without SSL from the loopback, Don't redirect to http when login in/out of the server-manager from localhost. Web Server - Hook into the new ssl-update event, Set TLSv1 back to enabled (but keep a prop to disable it if needed). Other fixes and updates - Correctly display http URL to the server-manager in the console, Remove motd text from grub.cfg 
+Major Changes in this release. Updated all to Koozali branding. Server Manager - Allow access to the server-manager without SSL from the loopback, Don't redirect to http when login in/out of the server-manager from localhost. File Server - added W10 support to SME Domain LDAP - Hook into the new ssl-update event, Mail Server - Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default), Modify whitelist_soft transaction to interact with dnsbl filter, Revert forcing TLSv1 patch as it breaks some inbound delivery, Remove karma rcpt handling, Check rua is defined before trying to parse it to prevent an error if a domain has a DMARC entry published with no rua, add support for the uribl plugin, add detailed spamassassin report headers. Web Server - Hook into the new ssl-update event, Set TLSv1 back to enabled (but keep a prop to disable it if needed). Other fixes and updates - Correctly display http URL to the server-manager in the console, Remove motd text from grub.cfg 
 
 
 Detailoed changes in this release
@@ -82,6 +82,18 @@ not included.
 
 File Server
 
+ - Create V6 profile dir (for Win10 roaming profiles) 
+ - The samba performance registry is now added in the win10samba.reg
+ - added W10 support to SME Domain  
+ - Corrected typo in patch of bad character '“', relative to roaming profile
+ - e-smith-samba-2.4.0.bz9038.W10_registry.patch 
+ - Roaming profiles follow Windows version (.V2,.V3,.V4,.V5)  
+ - Added e-smith-samba-2.4.0.bz9048.RoamingProfileForW8.patch
+ - Modified the registry file for roaming profile with W8 
+ - e-smith-samba-2.4.0.bz9038.W10_registry.patch
+ - Fix samba audit parameters Patch from Jorge Gonzalez
+ - Replace syslog template to rsyslog so samba audits are logged in the correct
+   file 
  - Additional tweak (to avoid null pointer dereference) for upstream bug 3868
  - Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters
    set (http://bugs.proftpd.org/show_bug.cgi?id=4230)
@@ -101,7 +113,7 @@ LDAP
  - Hook into the new ssl-update event 
  - Remove size limit for search result 
  - Make pdbedit output independent from locale and timezone so it can be
- parsed 
+   parsed 
  - Symlink /etc/init.d/ldap to /usr/bin/sv, 
    Chown all DB files to ldap before staring slapd 
  - Set checkpoint in slapd.conf instead of DB_CONFIG,  
@@ -126,7 +138,10 @@ Mail Server
  - Disable fips mode on stunnel 
  - Use stunnel instead of sslio to support TLS 
  - Add possibility to exclude users or members of other groups from group
-   email address 
+   email address
+ - Validate domains found in uribl with Data::Validate::Domain [SME: 9499]
+ - Use eval to fetch dkim policies, prevent fatal errors in case of DNS
+   timeout [SME: 9504] 
  - Remove karma rcpt handling, Fix karma logic by checking negative strikes
    Backport a fix for karma_tool so it can find its database 
  - Check rua is defined before trying to parse it to prevent an error
@@ -154,7 +169,10 @@ Mail Server
  - Allow settings SSL protocols from DB (and set TLSv1 back to enabled
    on a default install) 
  - Disable TLSv1 
- - Allow custom passdb args 
+ - Allow custom passdb args
+ - Set the default helo policy to lenient [SME: 9767]
+ - Turn SPF and DMARC rejects off by default [SME: 9654]
+ - Fix disabling DMARC reporting [SME: 9507] 
  - Remove o and r DKIM fields as they are not standard 
  - In qpsmtpd-print-dns set DKIM options after the public key so the string
    will still be split correctly 
@@ -193,16 +211,20 @@ Mail Server
 
 Server manager
 
+ - Update server-manager to Koozali branding thanks to John Crisp
+ - e-smith-manager-2.6.0-Koozali_manager.patch
  - Better syntax for removing Indexes option for the manager 
  - Remove index option for manager's resources 
  - fix 307 redirection to http when https is used 
  - update syntaxe for TKT Auth bump 7 for typo
-   corrected typo in e-smith-manager-2.4.0-dont_rewrite_to_https_from_localhost.patch
+   corrected typo in e-smith-manager-2.4.0-         dont_rewrite_to_https_from_localhost.patch
    code from John H. Bennett III bennettj@johnbennettservices.com 
  - Really don't redirect to http when login in/out of the server-manager
  - Don't redirect to http when login in/out of the server-manager from
    localhost 
  - Allow access to the server-manager without SSL from the loopback
+ - don't set environmental variable based on user supplied Proxy
+   request header CVE-2016-5385 
  - fix wrong warning in openssl_encrypt() for missing IV
    when IV is not required #1260315
  - fix segfault's when you try and allocate an SplFixedArray
@@ -276,7 +298,7 @@ Server manager
  - mysqli: fix possible segfault in mysqli_stmt::bind_result
    php bug 66762 (#1069167)
  - mysql: fix php_mysql_fetch_hash writes long value into int
- php bug 52636 (#1054953)
+   php bug 52636 (#1054953)
 
 Web Server
 
@@ -290,6 +312,8 @@ Web Server
 
 Other fixes and updates
 
+ - Allow /32 masks on the external interface, in which case we don't
+  check if the gateway is on the correct network) [SME: 9765]
  - Add a column to display forwarding address 
  - Correctly display http URL to the server-manager in the console 
  - Fire ssl-update event when default cert is renewed 
@@ -315,6 +339,10 @@ Other fixes and updates
  - Fix PPPoE after a post-upgrade 
  - Remove dependency on microcode_ctl 
  - Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey
+ - Quote filenames in genfilelist so filenames containing spaces are correctly
+   handled
+ - Added new createlinks function event_templates event_actions event_services
+ - Don't claim to own /sbin and /sbin/e-smith
  - Remove motd text from grub.cfg 
  - Allow empty comment when creating/modifying a hostname 
  - Add a migrate fragment to sanitize the host comment 
@@ -327,8 +355,7 @@ Other fixes and updates
  - Thanks to Michael McCarn and Jean-philippe Pialasse
  - init-ibays create the folder tmp within all i-bays root directory
  - ibay-modify create/chown/chmod the folder tmp within the i-bays root directory
- - Add an upload_tmp_folder setting by db command 
- - Thanks to Michael McCarn and Jean-philippe Pialasse
+ - Add an upload_tmp_folder setting by db command Thanks to Michael McCarn and         Jean-philippe Pialasse
  - Force SSL following ibays settings to the relevant domain 
  - Perl::critic syntax modifications 
  - Add more PHP options to ibays only by db commands 
@@ -340,7 +367,7 @@ Other fixes and updates
  - Roll in CentOS Branding
  - functions: parse -d first
  - functions: fix ignored delay in killproc
- - netfs: only unmount loopback device mounted on top of netdev or with back-file on netdev
+ - netfs: only unmount loopback device mounted on top of netdev or with back-file    on netdev
  - functions: improve killing loops
  - netfs: tweak nfs umount
  - sysctl.conf: mention sysctl -a
@@ -388,12 +415,7 @@ Other fixes and updates
  - backport to SME9
  - fix redirection when proxy ssl 
  - update apxs path for SME9 (sbin)
- - Bump for beta1 release of 9.2 
- - Bump for 9.1 final
- - Bump for release candidate 1
- - Bump for beta3 of 9.1
- - Bump for beta2 of 9.1 and update displayversion as well
- - Update for beta1 release of 9.1
+ - Koozali branding of manager
  - Update copyright in server-manager footer 
  - Don't put motd content in /etc/redhat-release 
  - created a template for /etc/system-release