CrushFTP Changelog

What's new in CrushFTP 10.6.1

Jan 12, 2024

Various improvements all around, security improvements, continual minor feature improvements (SSH key types) and additions, and library updates

New in CrushFTP 10.6.0 (Dec 19, 2023)

New in CrushFTP 10.5.5 (Nov 15, 2023)

New:
_0:released
_0:updated SFTP, SMB3, PGP libraries
_4:updated BouncyCastle libraries to latest 1.72 (used for PGP)
_5:changed how PGP encrypt/decrypt task works in a job for S3 locations to avoid any rename situations and just output the actual file
_8:updated SFTP libraries to improve KEX compatibility
_9:AzureClient now attempts multiple retries in case there i a temporary server issue, and added {0group}, {1gorup}, {group0} variables for user info
_16:SMB3 library updated to latest with improved kerberos support
_19:finished support for SOCKS5 protocol support. user/pass auth, logging flag, and protocol control in user manager
_22:major improvements to job info caching and job monitoring, flag to disable job summary lookup on dashboard job_summary_on_dashboard
_24:removed some jars used for JMS, if you use JMS, you need to manually re-add some jars to keep JMS support. This was required due to prior vulnerabilities in the older JMS jars. See wiki.
_25:significantly sped up the Jobs viewer when dealing with thousands of Jobs. Both in editing and saving jobs and in viewing prior run jobs
_32:added ability to do multiple jobs in testJobSchedule and changeJobStatus
Fixes:
_0:new SMB3 library fixes issues with Amazon FSX servers
_1:fix for some Tectia SSH servers and outbound SFTP connections from CrushFTP
_2:fix for ip restrictions and public key auth with SFTP
_3:2nd fix for ip restrictions and public key auth with SFTP
_6:fix for CopyTask bug with S3 locations and SFTP client not liking null characters in folder names
_7:fix for CopyTask bug with S3 locations
_10:fix bug related to expire users inheriting from group user
_11:fix for jobs not running at their scheduled time when the system was too overloaded with job schedules to process
_12:fixed bugs related to Move task with folder structures and being on the same disk
_13:fixed bug with Move task when absolute paths had been used in Find task
_14:fixed bug with Move task related to certain event scenarios
_15:fix for merged VFS items now showing when out of sync with SMB/SMB3
_16:fix for multi-threaded Move task handling folder creations
_17:fix for move task leaving behind folders when the source was a FTP server location
_18:fix for WebInterface when using SQL user mode
_20:socks4/socks5 auth fixes
_21:fix for uploads failing with WebInterface
_22:fixes for search process with bad directories in the memCache
_23:fix for remote agentRegistration in a HA environment
_25:fix for broken java -jar CrushFTP.jar scenario due to a malformed manifest.mf file. java -jar plugins/lib/CrushFTPJarProxy.jar was unaffected and still worked fine
_26:fix for connection pooling in CrushTask/Jobs with Copy/move steps not always doing pooling
_27:fixes for change password email delays
_28:minor SMB3 library update with some bug fixes
_29:fix for merged VFS download all items failing in certain scenarios
_30:socket usage improvements for Azure client protocol
_31:connections fixes for azure client
_33:rolled back JNQ SMB3 Library to prior version due to some connectivity issues for a customers
_34:fixed merged VFS scenario where all VFS items had different root names and zip download failed
_35:fix for failing dir listings caused by _34
_36:updated PGP supporting libraries to fix a PGP zipexception error on decrypt
_37:fix for DMZ server not allowing uploads for local accounts (pass through to internal was fine.)

New in CrushFTP 10.5.2 (Sep 10, 2023)

New in CrushFTP 10.5.1 (Aug 9, 2023)

New in CrushFTP 10.5.0 (Jul 27, 2023)

New in CrushFTP 10.4.0 (Mar 13, 2023)

New:
0:released
0:updated SSH libraries to support PUTTy v3 key type and support for ED448 key types
5:added active_jobs_shutdown_wait_secs parameter to allow CrushFTP to wait for jobs to finish before allowing a friendly service shutdown
20:automatically disabled multi-segmented downloading when memory is low
21:updated SFTP libraries to latest version
21:fix for FTPES uploads to FZ servers because they complain bout TLS closure and disagree with how java does it
23:re-wrote the HTTPClient multi-segmented download handling to be more memory safe
25:updated sftp libraries to latest version
26:updated SMB3 libraries which had various bug fixes (deadlocks and better connection handling)
28:validates SQL connections from the pool before using them for looking up user info when using SQL mode
29:added ability to reload keystores for internal and dmz by making a local file 'reload_ssl'
29:fix for a DOS related to password encryption, credit to Matt Moreschi
31:updated JNQ SMB3 library with minor fixes
33:triggers GarbageCollection before triggering low_memory level 3 alert...just in case memory really isn't that low
35:added VFS items at login log line to help track VFS config in archived logs
36:changes default for sftp to not use sftp_transport_blocking to improve compatibility
37:updated SMB3 library for minor bug fixes
43:added advanced list management capabilities to UserVariable task in Jobs. See wiki CrushTask Functions
44:allow deletion of read-only flagged files on SMB3...the same as Windows SMB allows
45:updated to final sftp library update
46:updating users with updated expiration date/time is now asynchronous
53:support for JKS sharing between cluster nodes with Let'sEncrypt plugin.
58:faster directory listings
59:additional logging for CrushTask debugging
61:added flags for 'ssh_client_*' in prefs.XML to control allowed ciphers, kex, and macs
Fixes:
1:new memory tracking algorithm for html transfers to better track and fix memory consumption issues
2:fix for delete on overwrite with similar named directory paths
3:fix for slow memory creep when using multi segmented transfers through DMZ and slow downloads
4:fix for sftp rename bug
6:fix for memory usage not being freed immediately when a multi segmented download transfer fails.
7:fix for failing sftp downloads
8:fix for failing sftp downloads
9:fix for FTPS/FTPES outbound connections potentially having a thread leak
10:fix for SFTP not honoring the lack of delete directory permission in some scenarios
11:fix for LDAP plugins not properly honoring group membership
12:fix for thread leak when running CrushFTP as a SFTP proxy
13:CrushTask multi-threading fixes for Delete task and error catching for zip/copy tasks
14:fix for DMZ UI not loading preferences
15:fix for dmz memory usage for multi-segmented transfer downloads
16:fix for dmz memory usage for multi-segmented transfer downloads
17:fix for memory not being cleared quickly when an error is encountered on file download
18:fix for html5 memory usage on DMZ for slow downloads
19:fix for failing dmz downloads created by build _17.
21:fix for SCP doubling filename when renaming file
22:rolled back SFTP libraries
24:fix for non-serializable item getting into areas where it should not have been
27:fix for split_prefs and dmz servers for server_list items
30:re-implemented window space control for SFTP to allow buggy JSCH implementations to not crash
32:fix for memory race condition when allowing multi-segmented chunks download
34:fix for job task item URL's loosing their final character
37:fix for DMZ quota lookups
38:updated sftp libraries for a fix for the 'paramiko' SFTP client
39:rolled back sftp libraries..still has fix for paramiko, but not working at high performance level for now
40:rolled back sftp libraries to last known stable version...
41:updated sftp libraries to a new stable version that protects against a memory issue, and compatibility issues
42:fix for Jobs loosing the path to items after their first copy was performed
44:fix for an admin bug causing deletion of all users, credit for Jean Calvin Mugabo of Trustwave SpiderLabs
47:fix for sharepoint VFS client
48:fix for ignoring errors during a Move task
49:fix for uploads not showing speed on dashboard
50:added additional full disk protection for job scheduler
51:fix for potential socket getting stuck in DMZv5 mode and all other sockets stuck behind it.
52:fix for limited admin and using @AutoHost on server ports
54:honors the hidden flag on SMB/SMB3 servers now
55:fixed bug with proxy protocol v1/v2 and SFTP server ports hanging sometimes
56:fix for routing connections through DMZ
57:fix for SFTP public key auth with disabled user manager users
58:fix for @AutoDomain limited administrators in the UserManager
60:bug fix for overlapping settings config in CrushTask scenarios
62:fixed issue where ssh_client_* parameters not used for Job configs (was VFS only)
63:fixed missing encrypted url support for SQL mode storage of user configurations
64:fix for items being lost for events when zipping on the fly with nested folders

New in CrushFTP 9.4.0 (Mar 13, 2023)

New:
Released
Added flag for ssh_disable_rsa_checks to allow insecure rsa keys...for now
Updated ssh libraries to the latest
Added web calls for encrypting a password in different types
Faster reset password username lookup
Improvements to user manager limited admin role limitations
Added controls for keepalive ssh itnerval and ssh idle auth timeout
Pass ssh client header info through DMZ to internal server
Faster DMZ v3 restarts
Added DMZ v4 mode for more compatibility with firewalls
Updated jAdaptive SSH libraries to improve SSH tunnels
Updated jAdaptive SSH libraries again to improve SSH tunnels
Re-updated SFTP libraries for improved ssh tunnel operations
Rolled back SFTP libraries due to memory and CPU issues
Fix for putty private keys
Added flag for sftp_round_seconds_up
Added multithreaded LDAP reverse querying for faster results and controls to determine if forward or reverse is used
Added experimental support for new DMZ protocol
Improvements for DMZv5
Web calls to encryptPassword by default uses server config now
Improved logging for blocked filename patterns
Added otp_numeric flag
Added logging of cipher suites to logs for SSL/TLS protocols and file based filtering
Reduce failure scenarios when thread max for the JVM is hit
Updated logging libraries for SFTP
Fixes:
Fix for vulnerability for the WebInterface on server's not using the DMZ feature
Fix for WebInterface folders not working when sym-linked
Fix for WinSCP uploads with .filepart not always being tracked correctly for upload events
Fix for WebInterface not loading under some configurations
Fix for memCache and search not functioning correctly.
Fix for how RFile launches
Fix for missing ripemd160 HMAC in SSH
Fix for error when renaming a user in the user manager
Fix for stuck SMB3 sessions on logout and expire password notifications not going out on second occurrence
Fix for security issue with SelfRegistration
Fix for default PGP cyphers
Fix for LDAP plugin failing to create a VFS on login
Changed rounding of seconds for SFTP to standardized rounding
Fix for DMZ BASIC AUTH popup in DMZ
Fix for blocked IPs for a brief moment after an unrelated IP was banned
Fix for attaching files in shares
Fix for CSV cumulative imports
Fix for DMZ tmp cleanup files on v3
Fix for s3 VFS connections when using SFTP client
Fix for DMZ v1 mode not starting correctly
Rolled back SFTP library changes due to compatibility issues
Faster login performance and fix for replication failing with SocketOutputStream error
Faster DMZv4 restart recovery
Cleans up old sockets faster on internal server restarts with DMZ mode
Updated SFTP libraries again for more bug fixes
Re-updated SFTP libraries with a fix for memory issues
Rolls back to previously known good SFTP library version to fix CPU issues
Fixes for bad SFTP servers with a * at the end of the filename
Fixes for sockets for DMZv5
Fixes for DMZ triggering invalid password alerts when its only looking up user information
Fix for passwordEncryption in the Preferences storing incorrect hashes.
Fix for SAML when no groups are specified doing invalid user validation
Removed log4j to fix sftp logging bugs
Fix for replication playback referencing the wrong paths
Fixes for DMZv5 trusted IP for DMZ connections and socket timeout fixes
Fixes for DMZv5 and firewall killing idle sockets
Fix for journaling rename bug
Fix for statistics DB deletion of expired records
Fix for out of order close operations leaving behind partial files
Fix for patterns with + in the source filter in Jobs
Fixes for limited admin specific permission granting and violation errors
Fix for uploads failing if an event was configured
Fix for DMZ v5 deadlock scenario on dead socket
Fix to turn off FZ SSL workaorund for TLSv1.3
Generic fix for FZ TLSv1.3 bug to handle all scenarios
Idle timer cleanup for compatibility with older CrushFTP instances, and multi-threaded rename bug fix
Fix for http ports not allowing connections for some people after build _68
Fix for rename bug introduced in _68, _69
Fix for WebInterface not loading with bad cookie
Fix for WebInterface not loading with bad cookie
Memory leak fix for versions 9.3.2_68 to 9.3.2_72

New in CrushFTP 9.3.1_0 (Jun 2, 2020)

Overall 9.3.1 has bug fixes, vulnerability fixes, and security fixes, DMZ improvements, SSH library updates, and third party SMTP/IMAP improvements
Changes since v9.2.0:
New:
_0:released
_6:added additional debug info for DMZ v2
_7:added logging for encryption password being needed after server restart
_9:added DMZv3 protocol mode with socket disconnection recovery
_10:added logging when disk is too slow for HTTP
_16:DMZ v3 logging and timeout improvements
_18:supports downloading PGP encrypt/decrypt on the fly without hinted sizes via WebInterface
_22:added http_chunk_temp_storage for multi domain uploads to overcome temporary memory storage
_24:added DMZv3 mode non SSL mode
_25:enhanced SNI support to allow for multiple certificates per JKS keystore
_30:Delete task in Jobs re-uses same connection for repeated deletions
_34:updated maverick ssh libraries to fix compatibility with BitVise client
_37:Fixes for SMTP and IMAP on how it works with GMAIL
Fixes:
_0:released
_1:minor DMZ v2 retry improvements
_2:major DMZ v2 improvements, and fix for route connection through DMZ from jobs. (DMZ v1/v2)
_3:DMZ v2 improvements for a manual port restart and logging filtering options not applying correctly.
_4:fixed logging for System.out to have the log tag
_5:updated SSH libraries, fixed restart command for all OS's and service memory editing form dashboard for all OS's.
_8:fix for vulnerability in the very old NoIP plugin for Dynamic DNS using http instead of https
_11:startup fixes for DMZ v3 and DMZ restart process handling
_12:fixes for SSH verbose logging and DMZ v3 startup issues
_13:fix for DMZ ping/pong logic for determining a hung DMZ instance
_14:improvements for DMZ v3 socket error recovery
_15:DMZ v3 logging improvements
_17:Fixes for DMZ v1 and DMZ v3 protocols
_18:fix for 'Send DMZ log messages to Internal server too.' killing DMZ
_19:fix for DMZ v3 unique ids
_20:DMZ v3 reduced logging after fixed tunneling
_21:fix for deleting files in s3 when the upload fails and delete partial files is enabled
_23:longer http chunk timeouts for http uploads and multi domain usage
_26:fixes to job scheduler for daylight savings time scheduling issues
_27:fix for limited admins not seeing users in the User Manager
_28:fixes for the SAML SSO and how it handles SAML groups
_29:fix for DMZ v3 data re-send actions, and long running DMZ servers
_31:fixes for limited admin in User Manager under special VFS configurations
_32:fix for SAML and authentication only scenario not being understood
_33:fix for extra DMZ logging
_35:fix for SCP memory usage bug
_36:fix for multiple DMZ v3 servers connected to one internal server

New in CrushFTP 9.3.0 (May 6, 2020)

New:
added additional debug info for DMZ v2
added logging for encryption password being needed after server restart
added DMZv3 protocol mode with socket disconnection recovery
added logging when disk is too slow for HTTP
DMZ v3 logging and timeout improvements
Supports downloading PGP encrypt/decrypt on the fly without hinted sizes via WebInterface
added http_chunk_temp_storage for multi domain uploads to overcome temporary memory storage
added DMZv3 mode non SSL mode
enhanced SNI support to allow for multiple certificates per JKS keystore
Delete task in Jobs re-uses same connection for repeated deletions
updated maverick ssh libraries to fix compatibility with BitVise client
Fixes for SMTP and IMAP on how it works with GMAIL
Fixes:
minor DMZ v2 retry improvements
major DMZ v2 improvements, and fix for route connection through DMZ from jobs. (DMZ v1/v2)
DMZ v2 improvements for a manual port restart and logging filtering options not applying correctly.
fixed logging for System.out to have the log tag
updated SSH libraries, fixed restart command for all OS's and service memory editing form dashboard for all OS's.
fix for vulnerability in the very old NoIP plugin for Dynamic DNS using http instead of https
startup fixes for DMZ v3 and DMZ restart process handling
fixes for SSH verbose logging and DMZ v3 startup issues
fix for DMZ ping/pong logic for determining a hung DMZ instance
improvements for DMZ v3 socket error recovery
DMZ v3 logging improvements
Fixes for DMZ v1 and DMZ v3 protocols
fix for 'Send DMZ log messages to Internal server too.' killing DMZ
fix for DMZ v3 unique ids
DMZ v3 reduced logging after fixed tunneling
fix for deleting files in s3 when the upload fails and delete partial files is enabled
longer http chunk timeouts for http uploads and multi domain usage
fixes to job scheduler for daylight savings time scheduling issues
fix for limited admins not seeing users in the User Manager
fixes for the SAML SSO and how it handles SAML groups
fix for DMZ v3 data re-send actions, and long running DMZ servers
fixes for limited admin in User Manager under special VFS configurations
fix for SAML and authentication only scenario not being understood
fix for extra DMZ logging
fix for SCP memory usage bug
fix for multiple DMZ v3 servers connected to one internal server

New in CrushFTP 9.2.0 (Jan 31, 2020)

New:
Updated SFTP libraries to latest builds for bug fixes for server side and client side
Additional debug messages for kicked sessions
Added ability to change default encryption password key: encryption_pass_needed
Added dmz_socket_pool_size to allow decreasing socket pool size in v9
Added timeout control for DMZ sockets: max_dmz_socket_idle_time
Added secondary login allowed by email flag: secondary_login_via_email
Azure and glacier no longer to temp filename renames for on upload since they don't implement rename. (Same as s3.)
Added config for http banned message
Improved logging for mass updates in the UserManager
Added additional admin statistics for http upload buffers and s3 buffers
Added deletion of keywords for a file when the file is deleted
Added DMZ tunneling support
Added support for quota handling in S3Crush VFS
Added secure delete flag for linux/windows, and LDAP direct group query lookup
Added {master} to share email body, subject, and email ids
Added disabled flag for server ports so they can exists, but not be enabled or start-able.
Added more debug logging to task flows for tracking down issues
Updated encryption libraries, and added supprot for Argon2d hashing support
Faster Hadoop failure recovery when goign through DMZ
Blocks rendering of files if they aren't specifically allowed for extensions that open in a new window
Added SMB3 signing controls for connections
Added Report A Problem button for WebInterface
Updated maverick ssh libraries
Improved threading model for FTPClients and monitoring for idle connections.
Changed SCP implementation to allow for special case of case insensitive filenames
Better handling of empty folders in WebInterface uploading
More automated retries for SMB3 disconnects
Logging in tasks can now be disabled and per task item logging now goes to the global CrushFTP.log (no more separate files)
Added thread_dump_delayed_login flag and alert to try and capture rare scenarios of delayed SFTP logins to determine root cause
Added debug logging to DMZ tunneling v2 mode
Added more clear logging for login success/failure
Updated package model to be generic for macOS/Windows
New DMZ protocol v2 mode
LDAP, CrushSSL, SAML, UniSSO can now limit usage of plugin based on User Connections Group.
Added dropbox protocol support for VFS and jobs
Less CPU usage for dir listings when its disabled for logging, defaults SameSite cookies to strict
Faster reports, using less memory (where possible).
Faster user list loading
Added global login frequency banning for abusive usernames
Updated SFTP libraries
Fixes:
Fix for random salt on CSV import
Fix for random salt on CSV imports with hashed passwords
Fixed SFTP issue with some servers by using BouncyCastle JCE provider by default
Fix for re-adding BouncyCastle repeatedly
Fix for ftp/sftp idle timeouts
Fix for WebDAV clients reusing same socket for different users
Fix for double PGP encryption with DMZ
Fix for setting new encryption password
Fix to allow more DMZ sockets at a time
Fix for deadlock scenario for DMZ sockets
Fix for slow recovered from blocked DMZ sockets
Fix for DMZ socket timeout not being honored
Fix for short read timeouts in DMZ
Fix for slow SSL socket acceptance in DMZ
Fix for network condition that could cause DMZ sockets to fail
Fix for single file sharing (scan_vfs_for_initial_listing)
Fix for some browsers failing to upload certain file types when there was no last modified date
Fix for FTP messages not being displayed correctly on DMZ and FireFox uploads via HTTP
Fix for FTPS session resumption on newer JVM versions, and S3 uploads when timezone is way ahead of GMT
Fix for file in user for SFTP not correctly failing the transfer
Fix for ssh tunnels not working through DMZ
Fix for missing PGP ciphers in key config and for scheduled reports expanding group names and a password bug.
Fix for uploading through DMZ
Fix for making home folders in SAML plugin
Fix for overwriting user XML files with account/password expiration enabled, and SMB3 thread leak for bad XML files
Fix for sftp set modified date while upload in progress, and created dates on the user usage report
Fix for header handling bug
Fixed DMZ startup bug
Fix for UserManager when using SQL for group creation
Fix for SFTP not reporting errors back on some upload scenarios with bad paths
Fix for DMZ two factor auth lookup when using @AutoDomain
Fixes for mime types on WebInterface, and Azure client updates
Fixes for IE and uploading in WebInterface
Fix for SFTP client socket leaking and being left open
Fix issue with expiring temporary bans
Tighter controls on multithreaded s3 download buffer
Fix for FTPES connections being denied for using the wrong protocol
More SMB3 retries
Fix for bad case on VFS virtual item for rename and upload and proxy support for google api QR code
Fix for Jobs sharing a running thread count across all jobs
Fixed bug with slow zip on the fly processing
Fix for .filepart uploads from WinSCP when the path has a space in it
Updated maverick SSH libraries to fix DMZ tunneled mode deadlocks
Fix for @AutoDomain failing logins
Fix for DMZ v2 mode and SSL connections
Fix bug breaking uploads at the same moment an admin was saving a suer in the User Manager
Fixed bug with creating new users on the DMZ instance
Fix for inheritance tracking when renaming users
Fix for large file sizes in SFTP/FTP remote server listings
Fix for login frequency alert not working through DMZ
Fixed bug with recent users list not being updated
Fixed for PGP, and loading split prefs for DMZ
Fixed bug with CrushTask emailing even if no files were in the list
Fix for DMZ startup issues
Updated log4j libraries to address a bug with the SFTP server engine
Fixes to DMZ v2 mode to handle more load
Fix for DMZ v2 with higher latency connections closing sockets early
Fix for zipping bug when not going through a DMZ instance

New in CrushFTP 9.0.0 (Oct 31, 2018)

*CrushBalance* load balancer, offload SSL, GEO IP routing, other rules for routing. http redirect to another location based on source IP or domain used, banning IPs
New VFS type of Citrix Citrix file share integration
Internal to DMZ communication is faster
Reports with embedded JS and images and data in single mailable HTML file instead of only links back to main server
Allow sftp port configuration changes without disconnecting users.
Uses less threads overall with worker threads to manage other actions. Less CPU usage, more efficient when handling many connections at a time. Idle threads, bandwidth threads, etc.
Admin dashboard show the graph of CPU usage of CrushFTP and OS CPU usage for Linux/OSX users.
Allow viewing the dashboard back in time so you can review how the server was performing in past days.
TempAccount replication for servers configured in HA mode
LimitedAdmin to be able to manage multiple groups of users....comma separated.
Mini text editor for quick changes via the WebInterface.
Share reminder emails before a share expires.
User reminder emails before password expires or account expires.
LetsEncrypt integration: LetsEncrypt plugin
Simpler SSL guide to help people get the right steps for SSL renewal or export.
Support XSHA256 command for FTP checksumming.
Updated SFTP libraries supporting newer ciphers and key exchanges
Proxy protocol v2 used by AWS load balancers.
Allow limited admin type control over jobs...allowing a user to build scheduled jobs, safely. Allowing users to manage jobs assigned to them, running, editing even, all with restrictions on what actions they can take.
Job audit log to audit what has changed in a job over time.
Allow Global variable type in tasks that can survive restarts. prefix a variable with "PERSIST_" to make it permanent.
Allow a job to use a common shared log file.
UI improvements to job organization for storing jobs in folders, grouping together.
UI addition of notes to document things about configurations on job design
Improved threading system for job flows
Allow triggering another job to run...not linking it into the job.

New in CrushFTP 8.3.2 (Oct 27, 2018)

New in CrushFTP 8.3 (Apr 28, 2018)

New in CrushFTP 8.2.1 (Dec 19, 2017)

New in CrushFTP 8.2.0 (Dec 19, 2017)

New in CrushFTP 8.1.0 (Apr 12, 2017)

New in CrushFTP 8.0.4 (Feb 6, 2017)

New in CrushFTP 8.0.3 (Feb 6, 2017)

New in CrushFTP 8.0.2 (Feb 6, 2017)

NEW:
HTML5 based upload system with 4x faster upload speeds, resume support, and auto retry.
Federating servers...multiple servers linked into one Linked Servers, managed and monitored from the master server.
Limited Server allows for a server to run with restricted filesystem access for "user data" and "server config" areas.
Server memory can be set from the dashboard now
User data can now be replicated to another server via a journaled replication system
Recycle bin now resets the date for easier time based cleanup
UI improvements to CrushSync systray/menu item for quick access
updated SFTP libraries for more modern ciphers and architecture
updated threading model for higher performance connection handling
GoogleDrive for VFS data storage is supported now
copy task items between jobs
Job monitoring by user or group support
support for job organization in job groups
Dropped old plugins: PostBack,LaunchProcess,AutoUnzip. CrushTask replaces all of them.
updated reports UI, more enhancements coming
CrushClient local agent is a new tool which now has an advanced CrushClientUI
improved slideshow playback for large folders with thousands of images
support for password based encryption in PGP files instead of key based
allow editing SSH port setting changes without disconnecting current users
supports the proxy protocol v1 header for servers behind load balancers that want to know the user's true IP
allows for changing speed limits on the fly for existing connections
files can now be locked, unlocked for more of a content management system
allows an end user the ability to download a prior revision of a file that has been replaced
reports can be run at hourly intervals
IPv6 support for IP banning and limiting connections for ports or users
Ability to delegate a Linked Job out to a CrushClient running as an agent in managed mode.
jQuery library updates
Telnet debug utility available on all admin areas
Previewing a video file can play a lower resolution pre-generated file instead of the full version.
FIXES:
fix for upload bug
_1:fix for working behind a reverse proxy and upload fixes
_2:fix for proxy errors
_4:fix for viewing some logs with bad data
_5:fix for folder monitor finds
_6:fix for download on the fly pgp decryption
_7:fixes for new HTML5 uploader, UI, tiny files, resume, error recovery
_8:fix for missing form items in uploads for events
_9:fix for SFTP sessions not being cleared out on close
_10:fix for username reset password token lookup
_11:fix for renaming in a dir without view access
_12:fix for new users in the user manager with custom emailing forms
_13:fix for job monitor role being able to see older prior run versions of the job.
_14:fix for leaving session references in SFTP
_15:fix for admin action trying to delete non existing item
_16:fix for SFTP sessions leaking and causing out of memory errors

New in CrushFTP 8.0.1 (Oct 25, 2016)

HTML5 based upload system with 4x faster upload speeds, resume support, and auto retry.
Federating servers...multiple servers linked into one Linked Servers, managed and monitored from the master server.
Limited Server allows for a server to run with restricted filesystem access for "user data" and "server config" areas.
Server memory can be set from the dashboard now
User data can now be replicated to another server via a journaled replication system
Recycle bin now resets the date for easier time based cleanup
UI improvements to CrushSync systray/menu item for quick access
updated SFTP libraries for more modern ciphers and architecture
updated threading model for higher performance connection handling
GoogleDrive for VFS data storage is supported now
copy task items between jobs
Job monitoring by user or group support
support for job organization in job groups
Dropped old plugins: PostBack,LaunchProcess,AutoUnzip. CrushTask replaces all of them.
updated reports UI, more enhancements coming
CrushClient local agent is a new tool which now has an advanced CrushClientUI
improved slideshow playback for large folders with thousands of images
support for password based encryption in PGP files instead of key based
allow editing SSH port setting changes without disconnecting current users
supports the proxy protocol v1 header for servers behind load balancers that want to know the user's true IP
allows for changing speed limits on the fly for existing connections
files can now be locked, unlocked for more of a content management system
allows an end user the ability to download a prior revision of a file that has been replaced
reports can be run at hourly intervals
IPv6 support for IP banning and limiting connections for ports or users
Ability to delegate a Linked Job out to a CrushClient running as an agent in managed mode.
jQuery library updates
Telnet debug utility available on all admin areas
Previewing a video file can play a lower resolution pre-generated file instead of the full version.

New in CrushFTP 7.7.0 (Jul 6, 2016)

New in CrushFTP 7.6.0 (Jul 6, 2016)

NEW:
saves backup copy of DMZ prefs when edited
added gene6 import for user manager.
now supports extra VFS controlling by limited admins
added {workingdir} to hack username URL referencing
temp share links with limited uses give a nice error screen now
adds md5 hashes to PGP encrypted and decrypted files
added replication to User Manager admin actions for new folders
added SQL connection pooling to statistics DB
allow for faster insecure session replication for segregated networks
added "Strict-Transport-Security" by default for 1 year
changed auth cookie to be HttpOnly
added startupdelay to prefs for slow servers, and CrushFTPDrive fix for auto reconnecting after network change.
added flag for sshsha1groupkexallowed, and adds auto retries for tunnel resets.
optimized CrushSync startup scanning and error recovery for network disconnects
CrushSync detects if sync folder is missing and creates it, and notifies on quota issues
updated PGP libraries to latest version
added copy/paste status and cancel button
added sha256 to as2, and warning if JCE is not using strong cryptography
added as2 mic alg control in prefs as2micalg
added byte validation for image files in Preview generation
Fixes:
fixes bug that doesn't block multiple job runs if saving state between steps is turned off
fixes (DHGEX group out of range 1536 !< 1024 !< 8192) on some linux distros
fix for PASV when using comma in PASV IP list
fix for multi merged VFS not doing PGP encryption
ignore bogus real name in PGP decrypt
fix for sftp properties in copy/move step being inherited wrong
updated builtin certificate to fix java compatibility issue.
fix for DMZ slowness processing logins
fix for extravfs items using underscore chars
fixed issue with DELETE events not tracking non FILE protocol deletes
fix for https port startup issue
speed improvements to CrushTask dealing with Jump tasks and large numbers of items
fixes for schedule timing
fix for upload event triggered by rename action
fix for server socket binding to all IPs
fix for error event having no message on aborted downloads
fix for SNI and FTP PASV
fix for PGP encypt not calculating new file size
fix for limited admins and extra VFS entries
fix for hard coded java path on windows, and failed login count tracking
fix for blocked filename chars
fix tolerating bad schedule configurations
fix for DMZ password request reset slowness
fix for java service installs
more java service fixes for windows scenarios. remove and reinstall for the path fix.
updated SFTP libraries to fix SCP
speed improvements for DMZ directory listings
honors disabled ciphers for outbound S3 connections
fix for daily log rolling being missed on systems with many session logs
fix for replicated VFS
fix for SFTP zipstream expansion
fixes for logins in FF and some IE versions
fix for direct linked URLs with user/pass embedded
fix for sftp uploads in DMZ indicating a dir was being replaced and not working
return user manager save errors to the browser
fix for scheduling related to daylight savings time change
fix for showing partially uploaded S3 files everywhere and not just in their faked path
replicated VFS fix for deletes
fixes for SFTP uploads with overwriting of a folder, DMZ and direct
fixes for advanced mode applet not keeping current session
multijournal and replication stability improvements
fix for CrushTunnel.jnlp logins
fix for CrushSync when dealing with hundreds of thousands of files/folders and multiple sync agents.
fix for CrushSycn startup downloading files with no date set
fix for priorities in ServerBeat and CrushSync folder uploads
added tweaks for multijournal reliability
fix for pgp encrypting on the fly for downloads
more fixes for data multijournal data replication
blocks zombie anonymous users, and ssh library updates
fix for long running paste operations
fix for CrushTask Find leaving threads open
fix for DMZ lookup of LDAP public key
fix for temp job cleanup, and filename filters on HTTP downloads
fix for slow PGP downloads
fix for test login on S3CrushClient

New in CrushFTP 7.5.0 (Jan 15, 2016)

New:
added redirect in WebInterface for forced preview/download
added flag to control "storpooling" for HTTP uploads.
attachment redirector logging improvement, added delete & rename to AccountActivity Report.
sped up the processing of large file lists in Jump task of jobs
added SNI support for FTPES
multithreaded deletes
watches for changes in local DMZ prefs files too
added sha1 flag for SSH, defaults to no sha1 key exchanges
Fixes:
fixed multithreaded upload handling to same HTTP session.
fixed bug with browser uploads
fixed cipher suites for SNI HTTPS sockets.
task error fix for null scenarios
fix for SMB url username/pass replacement
fixes for AttachmentRedirector and folder shares
fix issue with transfer speedometer creating load on session replication. fix for WriteTask and multiple writes to the same file from different locations
fix for video streaming in safari
fix for setting metainfo
ix for unsafe filename char replacement in http uploads
anceling upload in advanced mode didn't report it as canceled
ServerBeat fixes for out of sync server times
fix for ServerBeat and bringing serers back online.
fix for age on ServerBeat
fix for DNS PASV IP reply
security patch
WebInterface changes:
Fixed issues with events not being saved
Fixed issue creating new server
Direct link to preview files fixed
Date formatting fixed for internal shares
Explore zip fixed
New upload customization : Max number of files allowed in a queue, Hide start upload button on individual item
Fixed home directory not being saved while using plugin in events
Fixed auto load applet customization issues
Managing ciphers is easy now, UI updated
Date format is honored now in reports
Added TLS client versions
User can use alternate media file in previews (h264, user defined)
IE11 theme fix
Sharing related issues fixed
Added missing localizations
VFS linking logic changed
Fixed issues with removing users not getting removed from groups
Buttons list is now organized with filters in UserManager
Fixed ftpes issues
Added max runtime for the job schedule
Added support to get history of item and download older version
Video player UI/progressbar updated
Added reply-to in email templates
SAML and LDAPGroup plugin fixes
Fixed telnet UI issues
Added export support to SSL items
Added quick editing roles on SAMLSSO and LDAPGroup
Added temporary job log settings in preferences
Added new customizations

New in CrushFTP 7.4.0 (Jan 15, 2016)

New:
2:adds flag to block quota logging in FTP logs. hideftpquotalog
16:added locked permission for a folder in the VFS, sub items are not locked.
23:added UI component for importing CSV user lists in the User Manager
24:added hashalgorithm to prefs to control MD5 or SHA256 hash to use for tasks references
29:allows passing in parameters via URL for inclusion in forms
32:adds control for S3 multi-threading.
39:internal session replicated servers keep prefs synced.
50:added max URL length to prevent overrun on NTFS file systems
51:DMZ passes error events to internal servers
56:added signature validation for sync MDN
57:added SAMLSSO plugin
62:made job scheduler more robust
63:added http hammering connection settings
65:added s3crush replication
67:adds batch complete event hook to as2 files received.
69:added job/event to be triggered when a temp share expires
81:added support for OPTS MLST command variations
85:performance improvements for user manager with many thousands of users
93:support for multi-page PDF files.
94:adds support for dns lookup for PASV ip reply
95:added minimum speed warn and alert configuration
103:added variable VFS names in file listings
104:updated PGP libraries to latest build including bouncycastle
105:added flag for optional global ASCII PGP encoding instead of binary
106:added SHA3 password hashing storage method
109:fix for ascii pgp encoding and header size info
110:added max upload and download counts
116:added logging to track where a job was called from with remote job runs
127:added separate s3 threads counts for upload and download
134:added support for limited admin to view lob list without being able to view job.
135:enhanced AttachmentRedirector so its easier to setup and use
136:added multi-threading to delete task
142:SMB root items the user doesn't have access to now disappear and faster VFS root dir lookup
143:updated to latest SFTP client libraries
146:updated jQuery libraries
Fixes:
1:fix for speedometer thread leak
2:fix for duplicate name on top downloads and uploads report
3:fix for job scheduled running at a minutely interval
4:fix for password reuse.
5:fixes for multi write VFS system
6:fix for VFS local merge
7:fix for VFS merge
8:better cache management for DMZ and file listings.
9:fix for shares being created through DMZ
10:fixes for AS2 through DMZ
11:fix for email from addresses, and crushtask copy with temp name
13:fix for SFTP through DMZ under load throwing error during file transfer, and port cleanup
14:fix for DMZ uploads disconnects not being reported properly on internal server
15:fix for login counts for success/failure on dashboard
17:updated ssh library for threading fix.
18:fix for events treating files as directories.
19:ui fix for ftp settings in copy task, + sign in add after copy, and ftpclient stat processing.
20:fix for fast SFTP transfers and setting modified times at the end of a transfer
21:fix for DMZ uploads with network timeout and reporting error in event.
22:fix for user sessions being left listed as active in DMZ scenario.
25:new ssh library to fix deadlock scenario.
26:fix for race condition in DMZ with upload and rename
27:fixed timeout for session replication
28:fix for events running on disconnect before disconnect
30:fix for potential logging loop with plugins
31:fix for aborting uploads through DMZ and events.
33:fix for concurrency issues with uploads through DMZ
34:fix for replicated users with one server offline for extended period of time.
35:tunnelv3 is more stable and handles server restarts
36:sftp library update to fix issues with non conforming clients.
37:sftp race condition fix for fasts uploads
38:fix for dmz file being canceled and event not tracking it properly
40:improvements for memory handling in S3 with slow users connected.
41:fix for removing plugin instance
42:fix for rename issue in list view
43:fix for dmz scenario with copy/paste of larger files
44:fix for stats saving performance
45:fix for aborting file in DMZ/multiple internal server scenario.
46:fix for share permissions with quota value.
47:fix for s3 zipped folder download
48:fix for mis-calculated size of encrypted PGP files
49:fix for logged user data when making user changes
52:fix for logging bug
53:pass as2info to internal server in error scenarios
54:prevent sftp client logging
55:fix for job designer when zoomed out dragging was broken.
58:CrushTask logging fix
59:CrushTask logging fix
60:fix session logging error.
61:added ability to not save job items to disk to save memory
62:fix for machine's hostname that can't be resolved and session replication.
63:fix for next run scheduled job display time
64:fix for tunnel3 in CrushTask
65:fix for bad SFTP server listings from our client
66:fix for doubling of buttons in WebInterface for SQL Users
68:fix for fixed width import in CrushTask
70:fix for utf8 chars in s3 buckets
71:fix for failed PGP in-stream alterations leaving file in use when in error
72:fix for applet retries on permanent failure.
73:fix for space character and S3
74:fix for + signs in new url encoded s3crush
75:fix for s3 logins needing a bucket name.
77:fix for AS2 race condition with multiple internal servers and events
78:fix for job replication in HA scenario
80:fix for AS2 in DMZ and multiple internal servers
82:fix for password reset by token
83:fix for mlst format and FileZilla.
84:fix for user manager events loop in UI.
85:fix for repeating lines in share email body
86:additional debug logging for DMZ port handling to internal server.
87:AS2 fix for non DMZ scenario, and calculating MIC with SHA even if not signing.
88:fix for recycle being attempted for remote connections.
90:fix for SAML/SSO ACL usage.
91:fix for log view access not being able to choose alternate logs.
92:fix for oracle result sets in CrushTask.
96:fix for bug with blocking characters in upload
98:fix for SAML cleanup thread
99:fix for user manager limited admin with bad event item
100:fix for Tunnel3 and abrupt disconnects
101:fix for tempaccount expire date display in admin view
102:fix for # sign in passwords with CrushClient.
105:fix for {share variable usage.
106:fix for zero byte files in SFTP
107:better MIC tolerance in AS2
108:uses better random generator
109:blocks CRLF in header request
111:fix for stuck sftp threads, and differential upload fixes going through DMZ
112:fix for sharing an item that uses PGP for decryption
113:fix for tunnel3 memory usage
114:fixed relative paths for custom event triggering by button
115:improves detection of bad S3Crush items
117:fixes issue with stand alone client and blocked file uploads
118:fix for browser uploads of 0 byte files
119:fix for job scheduler and left over old XML files
120:fix for downloads not excluding invisible items
121:tunnel3 memory fixes
122:fix for webdav large uploads
123:fix for copy task multi-threaded
124:fixes for memory handling in Tunnel3, and performance improvements, fixed Move task folder issue
125:fixed for SAML signing authN request.
126:fix for bad ftp client upload check
128:another bad ftp client fix
129:fix for job using FTPES and client cert auth and updated Base64 implementation
130:fix for SAML base64, and Win10,Win2012 CrushFTPDrive
131:fix for multiple internal servers and session replication delay
132:url encoding fix for keystore import
133:URL encoding fixes for importing SSL certs
137:fix for job browse for file system items
138:fix for upload and rename events and ssl keystore password decryption
139:fix for find and max items in jobs
140:outbound SSL connections will now use TLS1.2 if available
141:fix for find task and don't add folders with limited amount of find items
144:fix for S3 using IAM temporary credentials
145:fix for User Manager server's file listing
146:fix for resuming S3Crush uploads
147:fix for next run displayed date calculation for a job.
148:fix for LDAP reverse group lookup and referenced template user

New in CrushFTP 7.3.0 (Mar 11, 2015)

New:
added check for update to check build
added sort task item
added download of HTTP response item in CrushTask
added {protocol} variable for crushtask.
allow controlling max outgoing http buffer (GDrive).
posix group supports variables.
crushtask error scenarios pass in the item of error now for variable references
added block overwrite pattern to crushtask copy/move
added append mode for CrushTask
improved job report schedule to give more details.
FTP now uses configured TLS versions
added CrushTask process only first item flags across most task items
tunnel version 3 is now available
added session cache async to disk
individual session logging can be disabled
adds copy unique name pattern
added custom user session log location
CrushClient can handle command line file transfers and be scripted out.
Added support for DES: scheme on passwords.
auto remove old expired internal share references
added new report for failed logins
added randomize home folder name for LDAP
allows forcing delays between commands in SFTP protocol.
jobs can be limited to one instance per server, or per cluster of servers
added type variable for deletes and renames
added type variable for downloads and uploads
added support for custom upload form meta info from DMZ
added priority to serverbeat
added ability to run a linked job on a DMZ server.
added ability to do chunked native uploads in web browsers for faster upload speeds.
added pack200, Z,XZ,LZMA compress/decompress types for CrushTask
added support for connection profiles in jobs.
added user and count info for security user hammering alert
added alert type for when CrushFTP is restarted
dmz security alerts are forwarded to internal server
added trim function support for text functions and auto trims alert_msg
added additional ban security alert.
added remote file client for running processes as a user in windows.
added ability to route as2 connections out through a DMZ.
added as2 message signature validation options
added ability to compute basic math expressions in CrushTask variables
added event for when a suer shares
added tag to log output, and support for google captcha v2, and logging tags at the start of the line
added custom event type
http sessions can now honor session timeout configurations overriding the http session timeout value
added ability for Link job task to run on other internal servers and other where to run choices.
added support for bind_ip parts in template user
added auto retry on loading usernames from XML
added resume support for S3Crush
improved DMZ logging, added alert type for month items
added 's3_max_buffer_download' flag to control memory usage on S#Crush downloads.
added segmenting support to s3crushclient to overcome resume issues on large files
added max upload/downlaod day and month available amount value support for web listings
csrf protection is enabled by default now
sped up S3 plain connections via caching
added cwd_stat flag for ftp client
added support for dir size calculations in WebInterface.
added ASCII flag for PGP ecnryption on the fly for VFS.
added temp_name feature to coyp and mvoe tasks.
dmz prefs now have new properties added by default
faster job jump/link scenarios with less delay.
added EXPORT ciphers to permanent disable list.
enhanced advanced mode transfers on resuming, and overwrite scenarios.
Fixes:
fix for rapid user logins potentially causing one to fail
fix for colliding VFS not allowing listings
webdav client fix over https
added comments to internal shares
added LDAP support for SSH key based auth lookup
fixed saving users in User Manager
fixed job cleanup for temp user event jobs
fixed bug with & in registration name and preferences
rolled back to acl2 mode for default operations
capture error on ftp logout when login didn't work, and don't make folders in popimap task
fix for dmz and linked VFS
fix for S3 downloads of entire folders.
fix for DMZ memory leak.
fix for CrushSync startup re-uploading offline deleted files on windows, and keyword creation for zip files.
fix for crossing data socks in multithreaded http upload in same session (crushsync)
fix for session replication clearing old sessions
fixed mecmache to have folders as well as files
fixed no content popimap bug
fixes for bad firewalls on FTP connect
fixes bad user.xml writes under load
fix for restoring jobs
more heavy load protection for single user account writes
race condition when downloading tiny files with SFTP
fixed job progress line tracking
fixed session cache and session cache on exit
allow sha or sha-1 AS2 mic responses
no longer checks for encrypted header size when items are internal VFS references
fix for DMZ/internal server with replication deadlock
fix for copy/paste folder in DMZ
fix for popimap task
fixed bug with session replication frequency
don't save prefs.xml file as regularly.
fixed bug with task to run when account is disabled.
fixed bug with manage shares removing valid references.
multiple ldap configs were not being checked properly.
fixed reverse proxy.
fixed password history logic.
fixed temp filename extension renaming when done
fixed move task not closing SFTP connections.
fixed url and name replacement variables in CrushTask.
fixed bug with server not tracking last_logins for reports.
fixed bug with DMZ downloads and advanced downloads
fixes potential deadlock issue under high load
fix for upload file type
fix for date variables in CrushTasks.
fix for viewing suer log
fixed caching bug with password history validation
fixed as2 task sending when dealing with many files.
fixed default threading issue with s3 not uploading large files.
fix for http uploading
fix for serverbeat master scenario
tunnel3 protocol is stable now.
fix for urldecode issue in cut/paste, and socks proxy by IP
fix for alerts missing the msg part.
fixed webinterface uploads timing out when they are slow to start
fixed RFile to work with service
fixed PGP trailer size for SCP
fix for importing trusted keys into PFX file
fixed bug with PASV response and private IPs
fixed pasv IP response scenarios for private networks and public
as2 variable fixes
fixed bug with upload form data going through DMZ
fixed loading connection profile for uservariables
fix for finishing a file upload
fix for receiving MDN through DMZ
hides column on expiring account report for not in use.
fixes issue with session timeout in clustered environment
fix for creating share in DMZ mode
fix for running multiple same named events at the same time, and fix for replicated DMZ share creation.
fixed bug with DMZ and multiple VFS locations
fix for client cert auth with CN at end of subject
fix for sending trust store for client cert auth to DMZ
fix for password issue in DMZ
fix for & in browser uploaded names
changed redirection to use relative path
fixed bug with keystores in memory in DMZ and AS2
fix for excessive memory usage on really large file uploads with S3.
fixed delayed initial login window
fixes for log rolling to be less abusive of CPU
fix for sftp uploads where session is closing before upload is completed
fix for double security alert notifications for bad_login and DMZ
fix for DMZ race condition missing replies.
fix for FTP proxy scenario for bad FTP servers that don't start you in / and don't implement stat properly.
fix for deleting partial failed uploads when suing a temp extension during upload
fix for http task and cookies
fixed s3 url selection bug
fixes for star_stat mode for proxying to windows IIS FTP servers
performance fix for star_stat and large directories
fix for ensuring http upload completes on tiny files
ftpclient proxy speed improvement
fixed memory usage in S3Crush.
allow file XML errors to be logged
fix for path consistancy on delete CrushTask
fix for raw S3 throwing errors when finding files that were in progress
fix for anon and null ciphers
fix for multiple http uploads in same single session having socket issues
fix for dir listings paths with filter
fix for job scheduler run timing issue.
fix for SFTP memory issue
fix for SFTP upload queueing.

New in CrushFTP 7.2.0 (Oct 29, 2014)

New:
tunnel improvements for disconnected sockets
multi segment downloading from S3 bucket
thumbnail previews now operates on VFS items and not just local file:// references (SMB, FTP, SFTP)
task have {working_dir} variable they can access
added link task
added support for Job references in folder monitor, alerts, and events
allow access to server_info variables
support custom java classes for task type
added additional cache options for FindCache, Copy/Move cache
added date time scenarios for Wait task
allow settings the supported MACs for SFTP
sftp can do multithreaded listings
support and / or operator for WebInterface search
added alert type for monitoring server variables
hide actual file path from upload exceptions
improved SQL speed for users stored in a DB by using better caching methods
allow mass updating of users as a limited admin, not just full admins
supports MSSQL for StatsDB now and reports
ignores requests for getadminxmllisting by non admins and limitedadmins
allow share generation to suggest a user/pass to utilize
support s3crush revision tracking
allow a user to upload and overwrite a file that was in use by them (from a leftover dead connection)
increased SFTP buffer size default to improve Linux performance issues
stop excessive user backups done at every login
allow events to be applied to only shared accounts a user makes
removed duplicate login event call
added user usage report
improved job monitor speed to ask for less info unless needed
server log now set to click to activate
added minimum upload speed, and minimum download speed restrictions for alerts. (negative value to trigger an alert)
multithreaded CrushSync uploads and downloads
tunnel improvements for disconnected sockets
added accelerated multi segmented downloads from S3
better memory handling to keep caches clean dup after they won’t be used again
added ability to cache all local file items in memory for faster searches
added magic ports starting with 444 in tunnels to know if the port is FTP or HTTP
added test VFS button
crushftp defaults to TLS mode by default, SSLv3 is optional. (Poodle vulnerability fix)
supports unencrypted DMZ connection for speed
webInterface supports file sizes on folders when uploading with advanced mode
added memory based filesystem support for temps storage location
added {working_dir} variable to CrushTask
added Link task to link in other jobs to a job.
more variables are accessible to crush task action now, all sever_info items
added support for custom CrushTask java task items from 3rd parties.
added support for modifying FindCache references in CrushTask for Copy and Move actions
added date and time scenarios to WaitTask until…
added support to “touch” a file sign a rename
added garbageCollection on demand calls to CrushTask.
added MD5 file hash calculations on file copies in CrushTask
added file timing on CrushTask Copy actions
added {full_log} variable reference for CrushTask which could be embedded in emails
AS2 supports HTTPS client cert auth
added completion types for CrushTask of killed, cancelled, or completed
allow setting custom headers in HTTP CrushTask items
PGP task supports hinting on decrypted file size
added looping on email ask to attach one file at a time
added support for starttls on PopImap task
drastically improved the speed of short running jobs
added {MMMM} for full month names in CrushTask
allows any heap memory size for CrushFTPDrive and CrushSync
added sync now menu item to force a sync in CrushSync
added growl style notifications in CrushSync to warn you if sync is offline
added last_login tracking for User Manager accounts
added max_logins onto User Usage report
added {web_link_end} variable for Share email body
support quota usage for plugin based users
added support to generate heap dumps for admin users for troubleshooting
added support for Radius challenge / response system for one time use codes
added max expiration day config for shares and default expiration days
added support for responding with failed MDN messages
added reverse connections for ports in DMZ scenarios
added audit report and started tracking additional audit items like rename, delete
added support for events running in async mode event by event
added support to find user for password reset when in SQL mode for users
added history tracking for current uploads/downloads in progress for admin UI graphs
added per user password salting support
added job queueing for async events
added salt to tab delimited import
increased ACL lookup speed for LDAP ACL mode
added {size} for sharing email
added net mask support for ServerBeat
added support for events and statistics on copy/paste actions
added control for max event threads.
supports smtp mail From with pretty formatting
hides MACOSX garbage items from zip previews
added flag to control writing session logs
Fixes:
fixed some SMB issues for rename move actions
fixed bug with find task when no times begin found not throwing an error
fixed multiple s3 buckets in single VFS
fixed name reference when times are unzipped
fixed job restoring after a server restart (multiple threads scenario)
webdav fixes
fixed max login time and dmz scenario
fixed encrypting the URL in VFS
fixed VIP movement issues with ServerBeat when both machines are offline
fixed memory leak with prior FTP sessions
fixed missing log entries for HTTP/SFTP RETR & STOR operations
fixed SSL manager error with blank trusted cert list
fixed csrf on downloads
Jobs UI fixes
login.html file redirection link restriction fix
sftp logging fix
fix overwrite not working on File objects when specified
fix for s3 downloads no closing properly
fixed client cert auth connects for HTTPS
fixed symlink support for SFTP client instead of removing them from listings
fixed SMB authentication errors
fixed DMZ internally routing connections through internal server not working
fixed bugs with known_host file support in SFTP client
fixed restoring a job after server restart and loading up prior cached file info
fixed names on CrushTask unzipped items
fixed file length references on CrushTask copied items
fixed UserList task on how it calls its subtask items
fixed closing connections bug with CopyTask actions
fixed bug with running multiple copies of the same job simultaneously (called from an event)
CrushSync threading fixes when multiple syncs are configured at a time
protects against getting banned during an upgrade
increased time-out for CrushSync and really slow dir listings
fixed bug with email templates with spaces in their name
restored http header access for plugins
fixed issue with TempAccounts and DMZ mode
fixed dir listings for FTPES clients and empty folders
fixed date locale for miniURLs
don’t waste connections on TempAccounts with a limit configured
fixed bug with upper/lower username case flag
fix race condition for plugin loosing active username info
fixed bug with access-allow-origin not working
fixed bug when log rolling greater than 20 days
fixed deadlocks scenario where the server could freeze under the right scenario
fixed bug taking down DMZ instance
improved socket cleanup for high load
fixed reverse proxy not matching path too
fixed default SQL config with datediff
fixed keystore arrangement of certs when adding in trusted certs
fixed bug with change password while having SMB or S3 filesystem
fixed bug in SSL test not testing the keystore properly
fixed bug where field login count wasn’t reset on success
fixed excessive logging in WebInterface actions
fixed DMZ bug with bad username/email requests
fixed linked vfs and SQL User Manager.
no temp rename on upload for S3Crush objects
fixed missing keep-alive header on redirect
fixed locked auth object for SMTP email
improved CSR generation for UK customers
fixed as2 message ids
fixed issues using TLSv1.1 and TLSv1.2
fixed hanging dir in SFTP when no files existed
fixed errors on mass uploads where cleanup is discarding them
fixes for UNC paths and Preview generation

New in CrushFTP 7.1.0 (Oct 29, 2014)

New:
Introducing AttachmentRedirector - redirect Outlook attachments through your corporate CrushFTP server for Enterprise users.
http://www.crushftp.com/crush7wiki/Wiki.jsp?page=AttachmentRedirector
ServerBeat has been rewritten to be more robust and no longer uses JGroups. Allows for active/passive job handling too.
Allow binding session replication to a specific IP
Allows greater than and less than signs in emails
SessionReplication now handles error conditions and higher load.
All around session handling has been significantly improved.
Improved WebInterface slideshow
Improved WebInterface streaming movie player
Re-activated WebInterface drag and drop support.
Added support for delayed uploads that will start at a later specified time.
Added page/tab title upload percentage tracking.
Added localization language selector into WebInterface for dynamic changing of the language.
Job designer improvements for displaying the active job progress and items each step processed.
Added submenu capability to WebInterface buttons.
Added duplicate VFS item and ability to copy VFS item from one user to the next.
Supports routing Execute CrushTask commands through a DMZ server with Enterprise licenses.
Uses internal URL handling for HTTP commands in CrushTask HTTPTask items.
Added KillTask, DecompressTask, and CompressTask items
Allows use of expired PGP keys.
Added functions for CrushTask to handle substring, replace, and split operations during variable replacement
Added false scenario route for the Jump task
Added route tracking on tasks
MoveTask can better handle moving a folder structure
Added warnings about PGP key sizes needing Java policy files
Added PGP verify and sign support to PGPTask
UserVariable can now target the first or last item in the list, and also “pop” it off the list.
HTTPTask can now upload the file contents
FindCache can now reference items locally or remotely.
Support routing a connection through a specific DMZ instance
Added SOCKS and HTTP proxy for routing outgoing connections
Added SMB protocol support to VFS and CrushTask items.
Support multithreaded S3 transfers and other major improvements to S3 protocol.
Added S3Crush protocol for CrushTask and VFS to allow fast interactions with S3.
Added OS/400 protocol support with its terrible system of folder simulation.
CrushTunnel now minimizes into the systray/menubar and can be revealed on demand.
DMZ communication now "sticks" a connection to a server unless the server goes offline.
PGP in stream usage now uses binary mode and not ascii mode for faster transfers
Advanced mode applet does zip64 to support very large files and still allowing compression
CrushFTPDrive supports more variables in the JNLP file for startup configs.
CrushFTPDrive can route through a proxy now.
CrushFTPDrive reconnects after machine sleep or other interruptions much better now.
CrushFTPDrive uses a system driver to simplify the initial installation requiring no reboots.
CrushSync now makes installing a startup shortcut optional
CrushSync can route through a proxy now
CrushSync supports only checking the size of files
CrushSync supports realtime only mode only capturing events that happen while running.
CrushLDAPGroup now has a browse function to help you choose the right path to choose.
Allow setting the full permissions to use when doing a Full Access temporary share.
AS2 adds SHA256 support.
UserFolderPermissions report adds the notes field to the report.
SMTP email supports more Auth modes.
Hack detection can be based on a URL pattern or HOST header.
Max expiration days for Shares is the default setting in the User Manager customizations.
Added WingFTP import
Remembers bad usernames for TempAccount attempts to prevent abuse.
More support for PFX and PKCS12 formatted kesytores.
Show the user when their account will expire.
Added CSRF protection to prevent hacking.
Allow defaulting a username for the login form
Supports only allowing a single instance of a job to run at a time.
Added ShareBodyEmailClient to have a separate text only body for opening in email client.
Added publish and attach for temp shares
Added convert passwords function to force all passwords into a particular hash mode if they are currently DES.
SSL improvements to assist with CSR handling. (Simple 3 step process now.)
Added offline update handling once users are on 7.1
Added support for quota reporting when going through DMZ
Supports multiple server session replication (3+)
Internal code cleanup and refactoring to help with HTTP session racking and simplify further development.
Added SharesSummary report item
Performance improvements, better memory management
Allows temp share by Copy mode for non local items.
SSL SNI support is possible when using Java 8
iCal fixes for WebDAV calendar requests
Better event item grouping and tracking
Fixes:
dealing with more than 400 items in a list with CrushTask
multithreading in complex task scenarios.
email address formatting in PopImapTask
replace all LINE references in CrushTask and not just the first one
"not" condition on the jump task was ignored
browsing inside a zip using windows.
space encoding issue for webdav servers
modified date bug in SFTP client.
FTPES files transfers of 0 byte files
Java applet uploader fixes with file size of sub items
pgp decrypt and encrypt both at the same time in-stream was only doing one, not both
fixed bug starting multiple tunnels at one time
fixed bug with start on login for CrushFTPDrive /CrushSync and newer Windows OS versions
fixed CrushSync downloading a file as a folder.
service install / uninstall fixes for Windows.
fixed issues with old job cleanup
bug fixes for slow socks5 proxy clients
bug with cut/paste and a CrushSync agent monitoring the folder
fixed issues with some linux distress free disk space reports
fixed issue with lost events on run immediate and a fast client logout after the transfer.
fixed issue with abusive sftp clients and DMZ mode
fixed various bugs in internal ReverseProxy implementation and deployed it as front end for crushftp.com
DMZ mode and download as zip fix
AS2 MIC calculation bug
copy/paste bugs in WebInterface when pointing to non local folders
fixed bug with temp job cleanup
fixed email password and email token for pass reset in DMZ mode
fix for DownloadAsZip when your in an invisible folder.
reports now indicate if no data was found for sport instead of just being blank
fixes bug in log rolling when log folder has other items in it
many DMZ improvements ins speed and stability
WebInterface added missing localizations.
ie8 issues fixed in WebInterface
fixed issue with CrushFTPv6 import of jobs using references to global plugins.
various fixes on Browse popups in WebInterface to correctly choose paths.
fixed issue with cloning plugins

New in CrushFTP 7.0.0 (Oct 29, 2014)

New:
Dashboard for server administrators
Role based administration so you can delegate some administration tasks to users.
Job scheduler (Enterprise only), and events have a new Task designer interface that greatly simplifies creating task flows, and monitoring in realtime the progress of a Task.
MP4 streaming playback in WebInterface with ability to skip to any point in the file.
SSL Certificate manager to simplify using existing certificates, and requesting new ones.
Automatic port forwarding using UPNP and PMP to simplify router configurations.
Built in self diagnostics and testing for server ports to quickly verify outside connectivity is working, and get meaningful suggestions for the issue.
Quick find system to search for a parameter, setting, user, etc. quickly with a hot key.
OS X journaling tool improvement for CrushSync tracking in realtime the changes being made so they can be synchronized.
Users sharing files can automate the attaching of the file into the email.
Full file indexing can be enabled to allowing searching file contents.
Limited user admin can make and manage their own sub groups.
Session replicated and clustered servers have their settings saved between multiple servers, and user manager changes sync also.
Outgoing connections through the VFS or Jobs/Tasks can be routed out through a DMZ server instance.
Shares can have limitations put on the usage of the expiring link allowing a limited number of uses.
Better log grouping for HTTP sessions that may span multiple different sockets.
Internal shares can automatically issue an email to the recipient, or attach the file.
Individual accounts can be disabled after too many attempted logins, or a general IP can just be banned from trying anything.
Zip files can be opened, and navigated through all protocols, and individual files can be downloaded from inside of them.
GDrive integration where the back end file system can be a Google drive.
CrushLDAPGroup can honor ACL permissions assigned in NTFS for authenticated users.
Hashed password stored in CrushFTP can have a salt applied to make them more unique.
Tasks can survive server restarts, resume where they left off.
Tasks can be clustered where multiple servers can take over the same tasks if one server goes down.
Supports acting as a Socks proxy, and HTTP Forwarding proxy server.
Jump task items have more controls on the logic (Enterprise only)

New in CrushFTP 6.1.0 Build 81 (Oct 6, 2012)

New:
WebInterface supports HTML5 drag and drop for file uploads. Upload interface is more streamlined now too.
Download basket has been enhanced and supports icon previews, and other actions.
VFS is much faster, more capable, SQL integration faster too
Added self registration with approval process
Added S3 protocol support
Added support for DMZ server and managing multiple CrushFTP instances from one for Enterprise licenses
Added support for creating a ZIP in the WebInterface
File based encryption is PGP based now instead of proprietary format
Supports larger zip files sizes (ZIP64)
Added "changing all" flag for CrushTask Find task
Added newer/older condition for Find task in CrushTask
Added FindCache task type to CrushTask to prevent finding items again
Added retry support for Copy task in CrushTask
Support resuming file transfers for Copy task in CrushTask
Added streaming support for PGP task in CrushTask (not only local files)
Added streaming support for Zip/Unzip task in CrushTask (not only local files)
New protocol engine in CrushTask, faster, more lightweight.
Java applet loading warns user if Java is disabled, or not installed.
Improved update handling with automatic CrushFTP service restart
Previews handle bad files quickly now
Better thread management
Added automatic inheritance for users added to a group
Previews icons can be downloaded with right click now
Added linked VFS items to UserFolderPermissions report
Limited Admin can configure forms, and tunnels on users
Support for bad FTP servers when using CrushFTP as a proxy (OS/400)
Supports ASCII/BINARY mode for FTP proxy operations
ExportUserPass report can access more properties from a user
Supports merging / colliding VFSs from multiple users
Added ERROR event type to user manager
Creates home folders when improving users
Changed library for proxy mode doing SFTP connections.
Supports setting the email on a user when making them from the command line
Added feedback when server is decompressing a file slowly on zipped uploads
Improved internal log messages
Added max timeouts for HA proxy connections
Fixes:
Fixes for sshfs client interacting with CrushFTP
Fixed events not being triggered
Fixed registration issues with older licenses
Fixed many issues with URL encoding of special characters in the admin UI
Fixed memory leak related to SFTP
Fixed disk space calculation for alerts
Fixed AS2 handling of MDN responses
Fixes downloading a file that is currently being uploaded into
Fixes for FTPS client SSL auth
Fixed importing older CrushFTP4 users to CrushFTP6
Fixed bug with duplicate event execution
Fixes for limited admin management
Fix for SMTP Subject not handling UTF8 chars
Fixed for folder monitor when finding empty folders
Fix for rename event
Fixed emailto: links for some versions of Outlook
Fixed bug in downloading ASCII files over FTP
Fixed bug with bad URL in sharing a copy of a folder
Fix for reverse proxy mode and unusual forwarded-for header
Fixes for tunnel closure
Fixes for in stream PGP encryption and decryption
Fixes for zip filenames in CrushTask
Fixed execute exit code handling in CrushTask
Fixed Wait task in CrushTask
Fixed many UI issues in User Manager

New in CrushFTP 6.0 (Oct 6, 2012)

New in CrushFTP 5.8.0 (Oct 6, 2012)

New:
better thread usage, handles higher loads now
added Jump support for CrushTask (Enterprise customers only)
added MFMT, MLSD, MLST command support to FTP
added per user file at rest encryption capabilities
improved HTTP interface response time
improved speed handling for uploads and download with Java applet (advanced upload/download) in WebInterface
supports delta based uploading and downloading when resuming a transfer with the Java applet
CrushTunnel can now do reverse mode
can now direct link to files even through a login request
validates emails in Share WebInterface
supports multiple simultaneous downloads and uploads on a single SFTP connections
WebInterface can select all files even in pagination mode now
shows growl notification in WebInterface when download starts
supports read_only fields in WebInterface custom forms, and hidden fields
added support for asynchronous events that might run for a long time
less WebInterface caching
WebInterface can now display the last error that occurred on a file transfer
can now control the number of recent sessions kept in the GUI
can block URL unsafe characters
better URL decoding capabilities
importing users can handle additional fields in tab delimited format
added support for max connections per protocol
added support for case insensitive usernames
added support for complex password restrictions
added support for changing the password front he login page when its expired
changed to Derby for internal DB engine to prevent corruption caused from HSQL (automatically converts)
internal code cleanup
Fixed:
CrushTunnel bandwidth acceleration had a memory leak that was fixed
other misc CrushTunnel fixes
login count is less exaggerated with web clients now
fixed zip archive structure being too deep for zipped web downloads
WebDav fix for some clients looping forever
fixed bug with IPv6 support
FTP proxy fixes
fix for Adobe Contribute WebDAV issue
fixed changing password when using SQL back end
fix for very small uploads and downloads int he WebInterface
fix date customizations for shares not he WebInterface
work around for JVM bug on some Windows versions
fixed file size tracking for zipping and reports
fixed upload bug with HTTP leaving files corrupt if the size was a specific size
fix for uploads not overwriting a file
fix for events and WebDAV, tracking multiple sessions as one
fixed daemon install for some OS X systems
fixed new files report when a path contained a space
fixed delete order for CrushTask deletes
fixes for variable replacement in CrushTask
bug fix for tree view in WebInterface
fixed bugs with resuming transfers in WebInterface
fixed bug with ReverseProxy and WebInterface

New in CrushFTP 5.7.0 (May 24, 2011)

New:
improved user manager load times
added new 'welcome' event to trigger different actions
increased size of thumbnails in Sharing emails
faster WebInterface performance
logs detailed changed being made to server prefs, or users to CrushFTP.log
inheritance for WebInterface customizations now merges across all layers
added cleanup of expired accounts in the user manager
added support for controlling who emails are sent To: and From: for Sharing
added ability to grant limited administration to just the user manager, and only the users in a group
preserves modified times on uploaded files using advanced mode
added the ability to do exclusion pattern matching for folder monitor
added support to encrypt VFS URLs in the XML files
additional modes for AS2 authentication
added ability to redirect user at login to another web page
alerts can now catch bad email addresses
added list of files a user accessed to the Welcome form report
reports no longer email out empty reports
added support for importing BulletProof FTP users
added support for MySQL and statistics DB
added additional APIs for WebInterface for external access
added default slideshow permissions when sharing images
removed old WebInterface
cleanup of unused libraries, smaller application size
Bug Fixes:
fixed bug with export user pass report handling groups
fixed bug with case sensitivity and using a DB as the back end for users
fixed bug with some UTF8 chars on the WebInterface
fixed bug with symlinks that are being downloaded
fixed bug with searching in the WebInterface
fixed bug with SSL and SMTP
performance tweaks for SFTP proxy scenario
fixed bug with tracking upload forms with Advanced upload
fixed bug with mass updates in user manager and VFS
fixed NLST responses
fixed bug with SQL mode and non local VFS
fixed bug where password changes were lost in the user manager
fixed memory leak in specific scenarios
fixed bug with SFTP download packet order sequences
fixed bug with Groups for various reports
fixed bug with creating too long of paths in Windows
fixed bug with cached VFS items being difficult to delete

New in CrushFTP 5.6.0 (Jan 21, 2011)

New in CrushFTP 5.5.0 (Jan 21, 2011)

Major Enhancements for Everyone:
New SSH Engine - faster, robust, and more compatible with SFTP/SCP clients in general.
New HTTP Engine
new engine is faster at handling HTTP requests, and handles reverse proxy scenarios correctly.
New HTML WebInterface - All based on CSS, Javascript, and HTML. Includes integrated invisible Java applet when needed.
No more Flash interface! Same interface works on any modern browser now.
Supports native browser drag and drop upload for modern browsers.
Uploading and downloading in the WebInterface can now use zipstreaming for faster performance.
Support for IPv6
Major Enhancements for Enterprise Customers:
High speed file transfers using accelerated HTTP tunnels.
regardless of distance, or packet loss, you can now get full speed on file transfers around the world.
20Mbit connections from Australia to the US.
100Mbit connections from Europe to the US.
So whatever your bandwidth is from your ISP, you can utilize it all if the other end also has the bandwidth.
Task Scheduler - You can run scheduled CrushTask instances to do various things when needed.
Other general enhancements:
Added option to require both public key and password authentication for SFTP.
Added support for @AutoDomain where the user's domain on their login determines where CrushFTP finds the user account.
Added event for when a user connects.
Added event for deleting files.
Added button to send email notices of new accounts.
Increased speed of remote admin handling.
Added more compatibility for AS2 and AS3 file transfers including ASYNC MDN replies.
Stores the last 200 hours of prefs.xml files for longer history to recover from.
Added ability to easily restore an older prefs.xml file from the main window.
Added STOU FTP command. (Store Unique)
Added ability to restrict server bandwidth, but exclude some IPs
Added user manager customizations for the WebInterface to insert your own CSS or Javascript.
Added SQL "modified" table to we can track when data has been altered externally. (Better caching support for SQL.)
Added safeguards to prevent accidental deletion of config files.
Added protection against reading a file that is only partially written.
Directory listings are now sorted by default.
Increased the speed of ASCII mode handling.
Added ability to get URL parts in an email event
Added hammering alert for user accounts connecting too frequently.
Added some additional logging customizations.
Added support for the same CrushFTP folder to do remote admin for multiple places.
Added control for proxy mode to do active or passive mode on FTP connections.
Added ability to set the home path of a user who logs in with SFTP.
Added configuration option for maximum threads the server can do.
Added support for SITE restart command.
Added support for ASCII mode when using proxy.
Cleans up older stats out of the statistics DB.
Added upload and download counts to the GUI user info window.
Added support for SFTP proxy mode to keyboard interactive servers.
Improved efficiency of Chunked encoding in HTTP handlers.
Added control over the index of the ethernet adapter in the ServerBeat protocol (High Availability.)
Added helpful message about AES256 encryption and how to enable it.
Increased speed of SFTP proxy mode.
Added preliminary support for XML API to do server administration.
Added additional debug logging throughout the server.
Events now run multithreaded.
User manager can now do batch copying, linking, and deleting of events to users in that group.
Created stronger warning message on what monitor folders does.
Added create local folder button into user manager.
Added display item to see "filetree" listings statuses on really large listings
User manager automatically displays hidden items now when using the quick jump feature.
Now uses better privilege escalation for installing a daemon, or using ports below 1024. Less annoying popup window.
Added ability to create user home directories.
Bug Fixes:
Better socket management when CrushFTP is acting as a proxy
Fixed tunnel configuration in remote admin mode
Binds to the same IP that the incoming FTP connection used for data channels
Fixed caching bug on local files
GUI tweaks for better sizing and layout
Fixed bugs with synching plugins to remote admin session
Fixed new folder bug with Windows FTP client, and Windows WebDAV.
Fixed GUI issues in User Manager when using the quick find for a particular config item.
Improved searching algorithm to be more reliable and faster.
Fixed formatting on expiration date in user accounts.
Fixed ServerBeat (high availability) function for Linux machines.
Fixed bug in creating command line users.
Fixed bug in "Forgot my password" link not working.
Fixed bugs in proxy mode when using SFTP.
Fixed bugs in service install when port configuration is not correct.
Fixed STAT command in FTP.
Fixed bug with monitor folder settings not being cancelled properly.
Fixed bug with multiple PASV commands breaking the FTP session.
Fixed bug with installing daemon when using SQL mode.
Fixed error conditions when using a proxy in RFC mode.
Fixed bug with duplicating an event not making that vent unique.
Fixed bug with plugins using public key authentication.
Fixed beforeLogin plugin hook.
Fixed bug where the user manager reset permissions when renaming.
Fixed bug with some characters on remote admin passwords.
Fixed IP banning for HTTP sessions.
Fixed bug with jails proxy connections and merging multiple proxy FTP connections.
Fixed user manager concurrency issues.
Fixed inheritance in user manager.
Fixed browser's BASIC authentication popup.
Fix for events thread dieting and no events being triggered.
Fixed bug that showed the root SFTP VFS item's path.
Fixed reports to handle the display of larger file sizes.
Fixed out of memory issues when using inline plugins for the user manager's events.

New in CrushFTP 5.1.0 (May 10, 2010)

New:
uses fewer threads for all sessions
client certificate authentication is now supported for FTPS as well as HTTPS
improves WebInterface to display logos, welcome messages and honor some color customizations
added control to block access to specific directories or files matching a pattern
improved server prefs GUI to be less confusing on what "Server Groups" do
added default for WebInterface to hide the upload method choice
added defaults for WebInterface sharing, and allowing uploads
supports recursive MKDIR command in FTP now
added customization to force slideshow only mode
added browse and test buttons for DB setup on the User Config tab
windows service will now work in 64bit mode instead of 32bit mode
faster exiting of failed remote admin sessions
added support for dumb proxy mode
SQL compatibility improvements
removes temp files when using remote admin mode from a web browser
added flag for disabling an account in the user manager
added additional plugin hooks to monitor and control CrushFTP
added flag to make events be able to be run immediately (_NO_DELAY at the end of the event name)
added support for SFTP public key files being stored in the user manager field
allows for multiple copies of CrushFTP to technically be run from the same machine
now propagates error messages back to WebInterface or SFTP client if an upload fails.
improved servu import to capture notes field
Fixes:
WebInterface compatibility fixes
bug fixes for webdav clients
bug fix for editing inline plugin info in user manager
fixed who downloaded report to only show downloaded files
bug fixes for the WebInterface sharing feature
bug fix for downloading PDF files with Adobe Reader browser plugin
bug fix for event handling processing a file multiple times
fixed bug when writing files in encrypted mode
fixed bug for making previews of images when not on the C drive
fixed bug with chmod in SFTP
fixed bugs with CCC command in FTPS mode
fixed bug with IIS FTP proxying
fixed compatibility with Adobe Contribute and WebDav
fixed bug with chunked HTTP tunneling
fixed potential memory leak when in proxy mode
fixed bug with importing CrushFTP 4 user databases to CrushFTP 5
fixed bugs with SFTP proxy handling of files and directories

New in CrushFTP 5.0.6 (May 10, 2010)

New in CrushFTP 4.9.10 (May 10, 2010)

New in CrushFTP 4.9.8 (Aug 20, 2009)

added new report "Expiring Accounts"
User Manager now selects user after duplicating
added delete event type to User Manager
if reports are empty, they are no longer emailed
added support for SITE ZONE command
warning message about ports in use is more descriptive now
banning IPs can now be disabled
uses new HTML page for getting CrushFTP version information
can now upload 0 byte fixed with SFTP
FTP proxying now handles PASV mode better
proxying FTP now works for UTF8 listings
added install daemon menu items for OS X
added default privs for LDAP home directories
debug logging now has timestamps
plugins can now provide public keys for use by SFTP logins
now uses default SSL providers for the JVM being used
kicking a HTTP session now kicks based on the cookie and not user and IP
responds with the reason for a FTP proxy failure to login
separated out components CrushFTP relied on to their own files for easier updating
remote admin from a web browser now requires a password to start
now allows for editing of remote admin URL during remote admin sessions
simplified conversions with CrushImagePreview plugin for non windows machines
rejects ebcidic encoding type
SFTP doesn't disconnect the user if only a channel has been closed, and not the session
fixed bug with SFTP connections sometimes failing to initialize
fixed bug with secure cookies
fixed bug with events on disconnect
fixed bug with the OS X Finder, and Adobe Reader when downloading PDF files
fixed bug on searching for usernames in reports
fixed bug where files could be left in use after uploading
fixed issue with HTTPS to HTTP reverse proxy configuration (protocol changed URL)
fixed timezone offsets when dealign with Daylight Savings time
fixed reports test button generating two emails
fixed bug where HTTP sessions could timeout after 30 minutes, even if still in use
fixed bug where ldap variables could not be referenced in emails
fixed bug in parsing MS FTP server listings
fixed upload forms search report to work with options on combo boxes.
fixes bug with proxy servers sharing connections on the same TCP Socket
fixes bug with HTTP proxy so that a failed directory change doesn't hang the connection
fixed bug where hack usernames never time out
fixed bug in updating CrushFTP on Windows where the update.bat had invalid references
fixed bug on Windows where the CrushFTP.jar may be lost during the update process
fixed windows service install to not write extra log files
fixed bug with remote admin URLs not working if they were missing a slash
fixed bug with uppercase key names in CrushSQL plugin

New in CrushFTP 4.9.7 (Aug 20, 2009)

New in CrushFTP 4.9.6 (May 22, 2009)

sped up SFTP connections
SFTP is now enabled by default on port 2222
added support for configuring a SSH Debug log file
supports renaming files in FTP across physical hard drives instead of only on the same drive
can now do inline unzipping of file contents during an upload (.zipstream)
new option to disable gzip encoding for WebInterface
SFTP can now delete an entire directory without going item by item
template user can now verify outgoing SFTP connections
handles over quota scenario better, stops transfer immediately.
allows password to be changed in a plugin
sort usernames alphabetically in Linux User Manager
better cleanup of temp folder when doing remote admin
fixed remote admin freeze when configuring scheduled reports
WebDAV connections now filter files based on the server settings
can now proxy FTP connections to DataExpress Nonstop (DXNS) servers.
server host key for SFTP can now be regenerated without restarting the server.
improved logging when importing Serv-u users
supports shorter login URL: http://server:port/u=user&p=pass&path=/
supports a magic filename called ":filetree" to get a recursive listing of files
now warns when recycle trach bin is invalid
reports can now reference the parameters used on the report via paramsObj
new options to allow uploaded items to be processed by multiple events
fix for Windows having corrupt plugins
fixed bug where log files did not roll
fix for FTP proxy connections not being released.
fix rapid requests of small files closing the connection too fast
fixed error caused by folder monitor monitoring a non-existant folder
fixed FTPS Implicit not starting data channels correctly
fixed user manager group selection bug where you couldn't cancel the selection
fixed variables that can be used in Alert emails
fixed bug where banned user was not immediately kicked
fixed bug with folders that had a double space in them with a FTP proxy
fixed double id numbers in the recent activity list
fixed sizing of GUI in preferences window
fixed GUI glitches in User Manager dealing with VFS inheriting and linked VFS's
fixed CSV exported reports missing return characters in remote admin mode
fixed permissions when linking multiple VFS's from users together
fixed bug with loading prefs.xml file after an outside editor changed it
fix for Active Directory style domainusernames
fixed download timeouts and upload timeouts being set to 6 hours

New in CrushFTP 4.9.5 (May 22, 2009)

New in CrushFTP 4.9.4 (Feb 20, 2009)

New in CrushFTP 4.9.3 (Dec 3, 2008)

New in CrushFTP 4.9.1 (Nov 3, 2008)

New in CrushFTP 4.9 (Sep 9, 2008)

added random password generator in user manager
added easy MiniURL creator in User Manager (right click)
added extra security measures where you can require valid client certificates for all SSL/TLS connections
added feature to make WebInterface button bar follow as you scroll the page
added support for Mac OS X 10.5.3's WebDAV changes.
web forms can now have each individual item referenced in email events by using %(element name)% (Example, %from%, %to%, etc.)
added file encryption so uploaded files are stored encrypted, and decrypted when downloaded
added FileEncryptDecrypt plugin allowing HTTP commands to be used to force a file to be encrypted or decrypted
added default title for WebInterface
added report to export users and passwords
SSH Server key generation improved to work on Windows, and easier on OS X now too.
CrushImagePreview now can be set to delay longer between image conversions
LaunchProcess plugin now lets you specify the separator character
Folder Monitor now defaults to being disabled until you enable it
added configuration option on SSL provider for non Sun JVMs
added more obvious warnings when the server is not able to get ports it needs
server welcome message is easier to edit now
CrushSQL plugin now will accept alternate column names if they start with "oracle_" to provide better compatibility
CrushSQL will now default to having ip_restrictions set if you forget to create some
added additional alert for quotas
fixed bug with HTTP 206 replies being off by one byte (PDF downloads)
fixed bug with SFTP transfers giving an error at the end (some clients)
fixed a bug where SFTP was sending empty messages at times when the window was full
fixed left over temp files after a web based remote admin session
fixed message, and added warning when de-authorizing CrushFTP.
fixed bugs with disabling auto connecting at startup to remote CrushFTP
fixed bug with permissions not being handled correctly in SFTP
fixed bug with SFTP clients giving an error when file transfer was complete
blocks '#' character from remote admin URLs
fixed logo alignment in WebInterface
fixed bug with miniURL's needing a time for expiration
fixed bug with disabled GUI elements in Preferences
fixed bug with testing SMTP server when installed as a daemon / service
fixed bug with kicking multiple users

CrushFTP Changelog

What's new in CrushFTP 10.6.1

New in CrushFTP 10.6.0 (Dec 19, 2023)

New in CrushFTP 10.5.5 (Nov 15, 2023)

New in CrushFTP 10.5.2 (Sep 10, 2023)

New in CrushFTP 10.5.1 (Aug 9, 2023)

New in CrushFTP 10.5.0 (Jul 27, 2023)

New in CrushFTP 10.4.0 (Mar 13, 2023)

New in CrushFTP 9.4.0 (Mar 13, 2023)

New in CrushFTP 9.3.1_0 (Jun 2, 2020)

New in CrushFTP 9.3.0 (May 6, 2020)

New in CrushFTP 9.2.0 (Jan 31, 2020)

New in CrushFTP 9.0.0 (Oct 31, 2018)

New in CrushFTP 8.3.2 (Oct 27, 2018)

New in CrushFTP 8.3 (Apr 28, 2018)

New in CrushFTP 8.2.1 (Dec 19, 2017)

New in CrushFTP 8.2.0 (Dec 19, 2017)

New in CrushFTP 8.1.0 (Apr 12, 2017)

New in CrushFTP 8.0.4 (Feb 6, 2017)

New in CrushFTP 8.0.3 (Feb 6, 2017)

New in CrushFTP 8.0.2 (Feb 6, 2017)

New in CrushFTP 8.0.1 (Oct 25, 2016)

New in CrushFTP 7.7.0 (Jul 6, 2016)

New in CrushFTP 7.6.0 (Jul 6, 2016)

New in CrushFTP 7.5.0 (Jan 15, 2016)

New in CrushFTP 7.4.0 (Jan 15, 2016)

New in CrushFTP 7.3.0 (Mar 11, 2015)

New in CrushFTP 7.2.0 (Oct 29, 2014)

New in CrushFTP 7.1.0 (Oct 29, 2014)

New in CrushFTP 7.0.0 (Oct 29, 2014)

New in CrushFTP 6.1.0 Build 81 (Oct 6, 2012)

New in CrushFTP 6.0 (Oct 6, 2012)

New in CrushFTP 5.8.0 (Oct 6, 2012)

New in CrushFTP 5.7.0 (May 24, 2011)

New in CrushFTP 5.6.0 (Jan 21, 2011)

New in CrushFTP 5.5.0 (Jan 21, 2011)

New in CrushFTP 5.1.0 (May 10, 2010)

New in CrushFTP 5.0.6 (May 10, 2010)

New in CrushFTP 4.9.10 (May 10, 2010)

New in CrushFTP 4.9.8 (Aug 20, 2009)

New in CrushFTP 4.9.7 (Aug 20, 2009)

New in CrushFTP 4.9.6 (May 22, 2009)

New in CrushFTP 4.9.5 (May 22, 2009)

New in CrushFTP 4.9.4 (Feb 20, 2009)

New in CrushFTP 4.9.3 (Dec 3, 2008)

New in CrushFTP 4.9.1 (Nov 3, 2008)

New in CrushFTP 4.9 (Sep 9, 2008)

New in CrushFTP 4.3.2 (Jul 2, 2007)

New in CrushFTP 4.2.4 (May 29, 2007)

New in CrushFTP 3.9.4 (May 25, 2006)