IPv6 reputation is here!
Our e-mail gateways has supported IPv6 throughout for a long time, but did you know that they also support IPv6 reputation and layer-3 filtering? Our so-called ippolicyd (an asynchronous process, party implemented in the FreeBSD kernel, and designed to protect the gateway in cases of immerse amounts of traffic) in combination with the recently IPv6-enabled GlobalView (IP reputation) service makes us the (I suppose) first commercial appliance to perform IPv6 reputation!
Keep an eye on the software update section; the release 2.3.4 that will introduce IPv6 reputation is imminent.
IPv6 and spam filtering
Last month the migration towards IPv6 got some attention (again) when the last remaining blocks of IPv4 addresses were allocated, and we were "officially" out of IPv4 addresses. If you only read the headlines, this problem might seem more problematic than it really is, while it's true that the last addresses were allocated they have been given out to secondary organisations that handles the distribution to companies and service providers and with the upcoming after market those who want to pay hard cash will still be able to get IPv4 addresses.
Scripted VSP/SPG deployment
This time I'm going to show how to deploy a VSP/SPG with multiple domains using the SOAP interface scripted in PHP (http://php.net). This comes in handy when you're facing the task of otherwise manually adding hundreds of domains with all or some different mail transports. If they all share the same transport, you could save yourself some trouble and use a "any"-domain (catch-all) instead, if the domain exists will then be determinated in the recipient flow by SMTP lookup (if this raises any questions contact our support :).
Assemble a list...
HCP seminars and new partners!
We're getting some rest on the train back from Malmö, and happy to announce that all attendees of this years certification seminars have passed the notoriously difficult examination test with flying colors! They are now highly qualified Halon professionals, and ready to serve potential new customers out there. Logotypes and links to new partners will appear on the reseller listing page shortly.
I like to express my great appreciation to all attendees for their patience, interest and hard work during these three days. You're the best!
Pictures from VMworld 2010
booth 2.0! since we got a quite hidden booth, we made a manual upgrade ;)
![]()
said hello to zimbra in their vmworld booth
![]()
halon beer, good to put out fire with? ;)
Even better on iPhone
The upcoming version, 2.2.3, will be even better on iPhone!
We have streamlined the interface, bundled it as a web app, and changed the title to the IP address or hostname on mobile devices such as iPhone, Android or Blackberry.
There are loads of additional new features, which will announced during the VMworld conference next week. Below is a teaser, showing only how to add a VSP as an icon.
VMworld, here we come!
It's confirmed; we'll be at VMworld Europe in booth 88! Come join us, register at http://www.vmworld.com/registration.jspa
This is what our booth panel looks like:

Upcoming SPG/VSP release 2.2.3
It has been almost two weeks since our last blog post, which was about version 2.2.2.2 and its features. The next version, 2.2.3, isn't ready for a public release yet, but is working just fine (if you want to try the latest beta, leave a comment!). In this post, we're going to reveal some nice features that will be available.
VSP 2.2.2.2 released with DNSSEC root trust
Today, on the 2nd of September we release H/OS 2.2.2.2. Neat, right?
Among the new features you'll find the DNSSEC trusting the newly signed root anchor, administration user interface improvements and the usual stability and performance enhancements.
Now why would you care? Well, this could be your first step into the next generation of e-mail security. Why not start DKIM tagging when you're at it?
GroupWise support in SPG and VSP
In addition to supporting SMTP and LDAP to synchronize accounts with a Novell GroupWise server, our mail security appliances SPG and VSP now integrates even better. They are now able to associate alias addresses in the quarantine, in order for users with multiple e-mail addresses to have just one quarantine box.
It also fixes minor bugs, and as always we encourage all users to update as soon as possible. Don't panic if you are having vacation, though :)
New site open for registration
Your username and password stays the same, but keep in mind if you want to comment on the site with a friendly username you could send me a message telling me what username you want on the site and I'll change it for you.
New version jazzing up the scripting language!
Today we bring you another feature release for the SPG/VSP/HSP mail security products! Feature releases typically jumps the third digit in the version number, from 2.2.1.1 to 2.2.2 in this case. Now isn't 2.2.2 a remarkably neat version number?
As you might have figured out, the first digit is just saying that you are using H/OS 2, the current operating system. The second digit is the major version, the third digit is the feature version, and the fourth digit is the patch level.
— “Adding some spice to the scripting language you say, it sounds interesting”
Next version will feature much-improved BATV
A long time ago, we incorporated cryptographic functions into our scripting language, HSL, in order for users to build features such as BATV. While very flexible, it sure was not user friendly :) Therefore, we present to you; batv_sign(), batv_verify() and batv_strip() which you can read about in our wiki documentation and of course in the HSL function reference.
Halon attending PTS IPv6 seminar
Today we participated in a panel discussion about IPv6 deployment arranged by the Swedish Post and Telecom Agency (PTS). See the full video below (sorry, Swedish only).
Can you reach ipv6.google.com?
If not, it's time to get started with tunneled IPv6. At least until you get native IPv6 from your internet provider. There are a lot of free IPv6 tunnel broker providers, but HE is one of the most mature and widely used. Before you start; some fun facts! The tunnel below work both ways, and is totally unfiltered. Further, the tunnel is very fast, usually saturating ADSL internet connections. In other words; deploy your website over IPv6 today! If you are also using our stunning SPG/VSP mail appliance, start receiving e-mail over IPv6 as well. Anyway, let's get started.
Summertime and a new website!
The sun is shining is Sweden, and we introduce a brand new site.
In addition to being prettier and easier to navigate, it will offer more functionality. For example, you may comment on this fine piece of blog post :) Further, you'll be able to (as soon as we've migrated the users from the old site) manage, buy, update, etc your appliances in one place. Please share any thoughts with us!