ACGI Dispatcher

Current Version: 3.0fc1 (November 10, 2008)

On Mac OS versions 9 and earlier, once could write applications that ran as "ACGI programs" in AppleScript or other languages that could handle Apple Events. Under OS X, Apache doesn't know how to send Apple Events, so you're out of luck. Apple includes an "ACGI Enabler" program with OS X Server, but chose not to include that with the standard edition. ACGI Dispatcher allows you to use traditional AppleScripts - or other programs that ran as ACGI programs under OS 9 - on OS X with Apache.

Version 3.0 adds/changes the following:

• Leopard compatibility
• Universal binary
• Ability to talk to bundled applications

AmphetaDesk

Open source; $0

Current Version: 0.93.1 (October 31, 2002)

AmphetaDesk is a remarkable program. In short, AmphetaDesk is a news aggregator - it sits on your desktop, downloads the latest news that interests you, and displays them in a quick and easy to use (and customizable) web page. AmphetaDesk actually functions as a simple web server (written in Perl but not requiring a separate download of the MacPerl package) that contacts and collects news from selected XML-based (RSS) news sites to be combined and served in a simple web page format that is served to your web browser (or to other people's browsers, should you care to broadcast the address of your server) by your very own computer.

All this is not as complicated as it sounds; using it is a download-and-double-click affair, and customization and selection of content is done through your web browser. Because it's written in Perl, however, AmphetaDesk runs more slowly than you might like, and it may have a speed impact on other running applications. That said, it's an awful lot of fun, and since it's absolutely free and the source code is available, it's worth a look by any geek who can't get enough news - yours truly included.

Version 0.93.1 makes a whole slew of changes, all of which are fully detailed on the AmphetaDesk CHANGELOG page.

BlueDragon

Commercial; See text

Current Version: 7.0.1.352 (November 30, 2007)

New Atlanta Communications, LLC produces BlueDragon, a low-cost ColdFusion Markup Language (CFML) application server that is widely used and admired. BlueDragon is available for Mac OS X in two editions: Server and Server JX.

The BlueDragon Server family of Java-based servers (Server and Server JX) enables the stand-alone deployment of CFML. Both BlueDragon Server versions contain a built-in web server for development and testing, and each integrates with Microsoft IIS, Sun ONE/Netscape/iPlanet (JX only), and Apache web servers for deployment.

Those looking to replace CFML with ASP or PHP due to budgetary reasons might consider sticking with CFML instead, deploying the base version of BlueDragon Server on Windows, Mac OS X or Linux platforms for free. BlueDragon Server includes support for CFCs, XML, Web Services, and Java and C++ CFX tags.

BlueDragon Server JX adds additional functionality to BlueDragon Server, including precompiled/encrypted CFML templates, J2EE session management, enterprise database drivers, support for SSL, support for additional OS/web server combinations - plus the ability to deploy hybrid CFML/JSP web applications (including shared access to data within J2EE sessions, ability to perform includes between CFML and JSP pages, calling Java objects from CFML, and more).

BlueDragon Server is free and BlueDragon Server JX is $899. See the BlueDragon Feature Comparison matrix for more information on the differences between BlueDragon Server and BlueDragon Server JX.

Version 7.0.1.352 adds/changes the following:

• Fixed #2691: Internal Server Error when connection attribute is excluded from a cfftp tag
• Fixed #2962: comparing strings containing only days of the week always returns true
• BlueDragon 7.0.1 final release

ColdFusion

Commercial; $1,299

Current Version: 8.0.1 (April 7, 2008)

Adobe (formerly Macromedia, Inc.) produces the ColdFusion web content server, written in Java for Mac OS X.

Version 8 includes a variety of fixes and enhancements that are best described in the online release notes. Highlights include:

• Added 64-bit support to nearly every platform.
• Improved functionality in several areas including AJAX functions, CFPDF, and CFIMAGE.
• Updated several software libraries including Yahoo YUI, EXT JS, Spry, and the FCKEditor.
• These updates continue to improve upon the existing high quality in the ColdFusion implementation, and possibly more important, enable support for the Safari browser.
• Added some core language improvements, including nesting of structure and array creation and have made AttributeCollections significantly more powerful, allowing developers to create structures of information that can be re-used from one tag to another.

CommuniGate Pro

Commercial; See text.

Current Version: 5.2.14 (April 30 ,2009)

Stalker Software makes the incredibly powerful and robust CommuniGate Pro Internet messaging server, which covers the gamut from faxing to POP mail.

Single server and cluster licenses are available, with prices ranging from $849 and up.

Version 5.2.14 adds/changes the following:

• MAPI: the MAPI Connector version 1.52.14.1 is included.
• AIRSYNC: a workaround for the Apple iPhone bug in processing multipart/alternative messages.
• Bug Fix: CG/PL: 5.1c2: the MAILBOXREDIRECTBYUID function was equivalent to the MAILBOXFORWARDBYUID function.
• Bug Fix: CLUSTER: 5.2.10: mailbox-alias name resolving procedure could fail when used with a Cluster Account.
• Bug Fix: CG/PL: 5.2c1: the SETACCOUNTPREFERENCES operations reset the Language and TimeZone environment variables.
• Bug Fix: XIMSS: 5.2c2: "auto-built" mail attributes may not be built for certain Remote Directory Units.
• Bug Fix: WebUser: 5.0c2: deleting Contact Group elements could cause program exceptions.
• Bug Fix: GROUPS: 4.0: some group cross-references could cause infinite loops.
• Bug Fix: PBX: 5.1c2: the Record operation was started even if there was a pending event.
• Bug Fix: DOMAIN: 5.2.2: renaming Accounts in a suspended Domain could crash the server.

CrushFTP

Shareware; $30

Current Version: 4.9.7 (June 24, 2009)

CrushFTP is a cross-platform, Java-based file server that provides FTP, SFTP (SSH FTP), FTPS (FTP over SSL), HTTP, HTTPS, WebDAV, and WebDAV SSL services. The "Crush" in CrushFTP comes from its ability to compress transfers on the fly seamlessly.

CrushFTP provides an expandable feature set via plugin support. Currently, all CrushFTP plugins are free, and they include:

• AutoUnzip (decompresses .zip files when a user uploads them)
• MagicDirectory (make a directory, and a user can login)
• WebStatistics (OS X widget to monitor your server)
• CrushSQL (use SQL tables to load your users from)
• LaunchProcess (launch external actions on uploaded files)
• HomeDirectory (make a user, and their home folder and permissions are created automatically)
• CrushLDAP (use ActiveDirectory, or LDAP to load your users from)
• BlockContent (only allow files with specific extensions)

Version 4.9.7 adds/changes the following:

• Added quota sizes to FolderSizes report
• Added support for OpenSSH formatted private server host key for SFTP.
• Support for files containing ".." in their filename. Support for FTP paths with ".." in the path.
• Improved quota handling to use cache more
• Quota calculations will now be queued for multiple simultaneous requests for the same folder. (faster)
• Added preference for controlling the startup command crush uses when restarting itself after an update
• Better handling of restarting server items only when needed after a prefs.xml file change by an external program
• Added checkbox for running events asynchronously
• Added support for permissions as part of the WebStar file import (tab delimited)
• Supports scan depth for the :filetree magic filename.
• Made Reports easier to debug what data is being generated (remove the XSL file to get raw XML)
• Added support for outgoing CCC commands for proxy mode VFS
• CrushUploader removes unsafe characters automatically during file uploads
• Fixed bug with ServU user import
• Fixed bug with directory listings being empty on some VFS configurations
• Fixed bug where no timeout for sessions actually timed out instantly
• Fixed bug with port 2222 overriding a previous server items information
• Fix for remote admin not loading completely
• Fixed bug where user manager wouldn't let you create your first user
• Fixed a potential thread leak
• Fixed macbinary mode to only work on Java 1.4 and Java 1.5 on Mac OS X.
• Fixed uploads via SFTP to a drop folder not renaming the file to an alternate name
• Fixed bug in HTTP uploads where headers were not UTF-8
• Fixed bug with checkboxes not refreshing correctly on the UploadDownloadSummary report.
• Fixed bug for FTP proxy mode not parsing directory listings correctly
• Fixed bug with UNC paths and the NewFiles report

DansGuardian

See text.

Current Version: 2.10.1.1 (June 8, 2009)

DansGuardian is an award winning web content filtering proxy for Linux, FreeBSD, OpenBSD, NetBSD, Mac OS X, HP-UX, and Solaris that uses Squid to do all the fetching. It filters using multiple methods. These methods include URL and domain filtering, content phrase filtering, PICS filtering, MIME filtering, file extension filtering, POST limiting. The content phrase filtering will check for pages that contain profanities and phrases often associated with pornography and other undesirable content. The POST filtering allows you to block or limit web upload. The URL and domain filtering is able to handle huge lists and is significantly faster than squidGuard. The filtering has configurable domain, user and source ip exception lists. SSL Tunneling is supported. The configurable logging produces a log in an easy to read format which has the option to only log the text-based pages, thus significantly reducing redundant information such as every image on a page. Pretty much all parts of DansGuardian are configurable thus giving the end administrator user total control over what is filtered and not some third-party company.

DansGuardian 2 is:

• free for non-commercial use
• not free for installation by 3rd parties charging for installation or support
• not free for commercial use
• licensed under the GPL

Version 2.10 is the first new "stable" release since August 2005, and includes a host of changes from the 2.8 series. Here are the highlights:

• Built-in content scanner plugin system which includes AV scanning
• NTLM and persistent connection support
• Header analysis and manipulation so you can manipulate cookies
• Large file (2GB+) download & scanning support
• Autotools build system
• URL regular expression replacement so you can force safe search in Google
• Deep URL scanning to spot URLs in URLs to for example block images in Google images
• Advanced advert blocking
• Many performance improvements
• Updates to handle all current web technology trends
• Blanket SSL blocking so you can block SSL anonymous proxies and allow access to legitimate SSL sites such as banking by whitelisting

Version 2.10.1.1 is a bugfix release that makes the following additional changes:

• Add "originalip" option to dansguardian.conf, for determining the original destination IP in transparent proxy set-ups, and ensuring that the destination domain of the request resolves to that IP. This can help to address a particular transparent proxy security vulnerability (US-CERT VU#435052), but because of certain limitations - only implemented on Linux/Netfilter; potential breakage of websites using round-robin DNS - the code is not enabled by default. Enable by passing "--enable-orig-ip" to the configure script.
• Fix a crash which could occur when dealing with simultaneous incoming connections in configurations using more than one listening socket.
• Fix a crash when checking time limits on item lists.
• Fix potential usage of uninitialised memory during phrase filtering.

DigiChat

Commercial; varies

Current Version: 5.1 (March 3, 2005)

Digi-Net Technologies, Inc. produces DigiChat, a Java-based client and server chat system for Web content providers. DigiChat and its sister product - DigiChat AV - feature a number of features that are summarized on the DigiChat Feature Set page.

DNEWS

Commercial; $95-485

Current Version: 5.7e1 (May 7, 2004)

NetWin, Ltd. produces DNEWS, one of the few NNTP news server systems available for the Mac, although it does not see much updating these days, as NetWin appears to be pushing its heir apparent, SurgeNews, which isn't yet available for Mac OS X.

DNS Enabler

Shareware; $15

Current Version: 2.1.1 (July 10, 2007) / 3.0.4 (August 4, 2008)

DNS Enabler is an inexpensive shareware application that takes the work out of configuring BIND, the DNS server built into Mac OS X. According to the authors, DNS Enabler "tries to be as buzzword-compliant as possible - it handles multiple virtual domains, multiple subnets, aliases, MX records (including specifying back-up servers on other networks), and creating the right number of reverse pointer and CNAME records - while doing it all using a single window, the Mac way."

Version 2.1.1 - the latest release for Mac OS X 10.3 & 10.4 - adds/changes the following:

• Fixed a bug which occurred when there is a domain, e.g. called ABC.com, and another, say, xyzABC.com which contains the same letters as the first domain. DNS Enabler got confused when it had to process both these domains in the same list. This has been sorted out and DNS Enabler is smarter now about these things.

Version 3.0.4 - the latest release for Mac OS X 10.5 (Leopard) - adds/changes the following:

• Fixed the config file to work with Apple's latest BIND 9.4.2-P1 update. Eliminates the "using specific query-source port suppresses port randomization and can be insecure" warning.

DNS Expert

Commercial; see site.

Current Version: 5.1.3 (December 1, 2005)

Men & Mice produces DNS and IP management software that enables users, through a graphical interface, to simultaenously manage standard DNS and DHCP servers on different platforms, as well as keep track of IP addresses. DNS Expert - a DNS analysis and monitoring product - is a module of Men & Mice's Men & Mice Suite that may be purchased separately and deployed independently from the rest of the suite. It performs over 80 different tests on DNS configurations and reports on issues that might affect the health of your DNS.

DNS Helper

Freeware

Current Version: 1.6 (November 7, 2003)

DNS Helper is a free application that takes the work out of configuring BIND, the DNS server built into Mac OS X. DNS Helper allows you to:

• Create zone, domain, db.cache, and named.conf files for your BIND server without the need to understand the formatting of those files.
• Set the needed permissions and ownership on the files after they are created.
• Install the files for you into the active system.
• Have total control over the DNS Server with the ability to start, stop, and reload BIND.
• Set the DNS Server to start at boot time.
• Read and save the system.log, filtering out the non-DNS Server related entries if desired.

Currently, DNS Helper does not do the following:

• Edit or maintain existing files.

With the 1.5 release, DNS Helper became a full replacement for Mac OS X Server's Server Settings DNS module. Actually, it can do quite a bit more than the Apple software can as of Spring, 2003.

Elektron

Commercial; $750

Current Version: 2.0.1725 (June 18, 2007)

Periodik Labs (formerly Corriente Networks LLC) produces Elektron, which is a software-based server that provides RADIUS/802.1X authentication services for Wi-Fi networks.

Version 2.0 adds/changes the following:

• Authentication Domains - Authentication domains allow you to map users to different authentication sources based on the user's domain. For instance, "user@foo.com" can be authenticated against your Active Directory, while "user@bar.com" can be authenticated against a remote LDAP server. Even if you have only a single domain, this feature gives you the ability to add support for guest accounts: configure "company.com" to authenticate against your company's user directory, while "guest.company.com" is configured to use Elektron's built-in user database for easy temporary account creation.
• FIPS 140-2 Validated Cryptographic Module - Elektron version 2 uses a cryptographic module that has been tested and validated under the NIST Cryptographic Module Validation Program as meeting requirements for FIPS PUB 140-2, enabling its use in certain government and financial industry applications.
• MAC Address Authentication Simultaneous use of MAC address and standard user account authentication is supported in Elektron version 2, and is fully configurable on a per-access point basis.
• Full Windows Vista Support - Elektron's Windows Vista feature set has been updated to include full support for installation on Vista (including UAC support) and to authenticate Windows Vista clients when installed on any supported platform.
• SNMP - Elektron can be configured to to respond to SNMP management information requests in accordance with the standardized RADIUS MIBs, and to issue SNMP traps is response to a user-configurable set of server events.
• Authorization Policies - Policy support has been enhanced in Elektron version 2, with new support for triggering actions based on string pattern matching of the username, account groups, access points, and MAC addresses. Support for external scripts includes the ability to trigger policies based on the script result, and to have an external script act upon the result of the policy. Also included is greatly simplified configuration of VLAN assignment, one of the most common uses of authorization policies.
• EAP-FAST - Support for Cisco's EAP Flexible Authentication via Secure Tunneling protocol makes its debut in Elektron version 2.
• Least Privilege - Elektron version 2 honors the "principle of least privilege," in which the server performs its normal functions at the lowest possible level of security privilege, closing potential avenues of attacks on your server.

Eudora Internet Mail Server

Commercial; $400

Current Version: Server: 3.3.9 (March 2, 2009) / Admin: 3.3.7 (July 21, 2008)

Formerly known as Apple Internet Mail Server (AIMS), Qualcomm once bought and renamed this freeware SMTP server program that can be used on its own or in tandem with Eudora. As of December, 2001, however, original author Glenn Anderson licensed the product back to himself for future development, while keeping the Eudora badge.

EIMS - as it is commonly known - is very easy to set up, and quite reliable. Version 3.2.10 makes several fixes that are described in detail in the online release notes.

EIMS involves two pieces of software: the actual server itself, and the EIMS Admin administrative console application.

Version 3.3.9 of the server adds/changes the following:

• Fixed IMAP bug in 3.3.8
• Improved IMAP handling of malformed messages
• Fixed stuck queues on Intel after deleting, forwarding, or bouncing a message

Version 3.3.7 of the administrative console adds/changes the following:

• Fixed Command-Q not working in login window on OS X
• Fixed popup menu sizes on Leopard
• Fixed Account Enabled checkbox not being disabled for postmaster accounts
• Mouse wheel/trackpad scrolling now works in windows that aren't the front window
• Better reporting of lookup errors
• Fixed crash when default domain was longer than 53 characters

An upgrade from version 3.2.x costs $60; a full version costs $400. EIMS Light is also available for $200; it supports all of the features of the full version of EIMS, except it only supports one domain (with domain aliases), has no IMAP server, no directory server (LDAP and Ph), no AppleEvent/AppleScript support, and no Incoming Mail folder.

Qualcomm sales and technical support are not supporting EIMS 3. Qualcomm will, however, continue to support EIMS 2.x and 3.0.x; see http://www.eudora.com/techsupport/eims/ for more information.

EvoCam

Shareware; $25

Current Version: 3.6.4 (April 10, 2009)

EvoCam (formerly CoolCam) is a webcam server application for Power Macintosh, PowerBook, iMac and iBook computers running Mac OS X 10.4 (or higher). EvoCam provides true WYSIWYG editing of text captions, picture badges, clocks and blur items, all floating on top of live video from your camera. Mac OS X users: Currently, Mac OS X supports only FireWire DV cameras. Please contact the manufacturer of your camera to ask about support for Mac OS X.

Version 3.6.4 adds/changes the following:

• Added /phone.html URL for viewing via iPhone
• Added support for viewing previously recorded movies via iPhone
• Added support for pan/tilt/zoom via web interface
• Added support for Airlink 747W
• Added support for AirLive WL-2000CAM
• Added support for Axis M1031-W
• Added support for Canon VB-C300
• Added support for Genius Secure300R
• Added support for Huviron SK-N190, SK-N490 and SK-N590
• Added support for Lorex LNE3003
• Added support for NorthQ NQ-9006
• Added support for Panasonic WV-NS202
• Added support for TRENDnet TV-IP410
• Added support for Vivotek IP7131 and IP7132
• Added AppleScript support for enabling/disabling audio sensor
• Added AppleScript support for setting sensor item sensitivity
• Added AppleScript support for manual recordings of a specified duration
• Fixed problem affecting compatibility with some network camera models

EvoCam is shareware. Site licenses are $250 and world-wide site licenses are $500.

eXodus

Commercial; $270

Current Version: 9.0 (June, 2003)

Powerlan USA, Inc. produces the eXodus series of X servers for Mac OS 9 and Mac OS X. Features include:

• Security through TunnelMate Secure Shell Security Client
• Connect to both remote and local X clients
• Enhanced rootless screen support for X Desktop environments
• Traditional rooted screen support
• Fully X11R6.4 compliant
• Hardware accelerated OpenGL
• Increased XDM Security
• Xauth user access control
• Compressed pcf font support
• Rootless (Mac OS X Aqua, Classic Mac OS, & Motif) Window Styles
• Euro support

FirstClass

Commercial; varies

Current Version: Client: 9.126 (June 15, 2009) / Server: 9.1 SP1 Build 612 (July 24, 2008)

Centrinity produces the FirstClass email and workgroup communication/collaboration system. Server software includes FirstClass Business Edition and FirstClass Education Edition.

Although no information is available regarding what's new in version 9.126, FirstClass Client version 9.124 added/changed the following:

• Quick Filter performance has been improved.
• Server Monitor has been widened to fit content and the new Worker Tasks tab added.
• Text files in external folders (eg. server log files) can now be downloaded.
• Nested messages (ie. messages attached to other messages) are now exported as a hierarchy on disk, as though they were folders.
• A number of fixes have been applied to FCAS applications.
• Fixed issue where Monthly calendars were printing with a heading of 2008 (no month name and incorrect year).
• Agenda view printing of a calendar no longer shows the weekday name twice.
• Punchthrough calendars in the calendars pane are no longer drawn with a black background, making the text unreadable.
• Fixed errors with general header printing, so that the name of the person printing the file will always be displayed when requested.
• Calendar printing now prints the title of the calendar(s) the user is currently viewing (OSX).
• An error where the print dialog would hang (clicking buttons would do nothing) after printing multiple times on the Mac.
• Fixed issue where expanding field backgrounds in (Chats,Calendars) were miscoloured.
• Fixed issue where Calendar weekly view colours were missing on calendar items.
• Missing "Highlight of Today"in weekly calendar view has been fixed.
• Spell checking no longer hangs when the envelope form contains duplication groups (i.e. RWD page form).
• Fixed various Editor instabilities in text viewers, chats, etc.
• The export process now waits for attachments to messages to complete downloading.
• Only a single copy of attachments is made to disk (rather than three incorrectly named and often incomplete ones).
• Exporting doesn't crash for reasonably large tables.
• Attachments are now bundled up in a folder named "Attachments" on disk.
• Messages/attachments with strange names are now corrected.
• Various exporting issues have been resolved.
• Changes to embedded image auditing should avoid the loss of embedded images when editing documents over a slow network connection.
• Export/Import can't handle more than 1 attachment.
• Fixed issue where Downloading several attachments may have overwritten existing files without warning.
• Fixed issue where Conference export would lock up the client when cancelled.
• Messages and containers with path separation characters (ie. /, :, and \) can now be exported.
• Additional illegal path characters are now stripped from file/folder names prior to creation on disk.
• Various colouring issues in localized clients have been resolved.
• Various calendar printing issues have been fixed.
• The call user form may have "junk" in the string has been fixed.
• Unable to see last DirList Entry in some cases has been fixed.
• Missing help text in Customize tools has been fixed.

FirstClass Client requires Mac OS X 10.2.8, 10.3.4 - 10.3.9, or 10.4.x at a minimum; FirstClass Server requires Mac OS X 10.4.x or later.

You can find the latest version on FirstClass Online in the Conferences/Downloads/FirstClass Product Updates section of your software. Ensure that you review the Upgrade Instructions located there, and have your FirstClass upgrade license before proceeding with an upgrade. You should find the upgrade license in your FirstClass Online account mailbox or can complete an online request form for it.

See the online support page for more information.

iForm

Commercial; $45

Current Version: 2.4.8 (February 25, 2008)

Limit Point Software produces iForm, a specialized form-generating and form-processing server that simplifies implementation of web-based forms, with no separate web server or CGI processor required.

Version 2.4.8 makes the following changes:

• System requirements have been relaxed: this version now works on Mac OS X 10.3.9 and above.

The software requires a demo registration code in order to take it for a test drive.

Interaction

Freeware

Current Version: 4.1 / 4.5 (December 22, 2004) / 5.0.2 (May 25, 2005) / 6.0 (May 5, 2009)

Interaction is an application that adds threaded discussion forums, chat rooms, and a shopping cart system to any WebStar, MacHTTP, Web Server 4D, WebTen, Quid Pro Quo, NetPresenz, Zeus, or Mac OS Web Sharing server.

Versions 4.0 and higher can generate WAP documents and other XML based formats using XSL, making the pages available both for web browsers and PDAs. It can extract and include data from other sites (included web enabled databases) using the revised Resource entity type, with form data optionally forwarded from the original request based on configuration in a dialog on the Mac.

Interaction 4.5 is "Carbonized" and runs on Mac OS X Classic (but not natively on Mac OS X), in addition to Mac OS 8.6 and 9.x with CarbonLib 1.4 or higher.

Version 5.0 is the first "native" Mac OS X version, and version 5.0.2 is presumably a bugfix release. Changes are somewhat detailed in the online release notes.

Version 6.0 is the first new release in almost four (!) years, and makes the following enhancements:

• Components - The components have been moved to the Plug-Ins folder inside the application bundle. They can be managed using the Get Info item of the Finder's File menu (under plug-ins).
• Menus - Quit and Preferences menus are on the Apple menu.
• Themes - Theme manager supports multiple predefined themes.
• Chat - XSLT templates for the statements.
• Chat - Case insensitive matching of keys in form submissions
• Chat - Fixed the 28 entity so that it can be used correctly in chat statement template entities.
• CGIs - Better feedback when a back-end CGI fails to respond.
• Preferences - All preference groups have documentation.
• Preferences - Process Order preference has been superceded by new Responders preference.
• Preferences - Menus for Preferences is on the Apple menu as prescribed by MacOSX.
• Dialogs - Modernized Visitors Monitor.
• Dialogs - Visitors monitor dynamically updated when a visitor arrives or expires, with real time update of each session item.
• Dialogs - Modernized Recent Visits monitor.
• Dialogs - Restores the triangles in the Document outline palette.
• Dialogs - Fixes the Resource Entities dialog in OSX so it no longer fails to accept input or misehave in other ways.
• Dialogs - The pop-up menu on the Composite Restriction dialog fits.
• Dialogs - Drag & Drop works again for files and folders from the Finder.
• Dialogs - Updates the Locations dialog when files are removed.
• Services - Fixes bugs in the theme selector of forum/chat.
• Services - Predefined themes are no longer separated from custom themes in the theme selector.
• Services - Many fields now display special characters instead of character entity references e.g. the Forum dialog (thanks to Pat Sheehan).
• Mailer - Sends mail even when it isn't possible to resolve a domain name for the local host
• Mailer - Fixed OS X problem where the mailer considers hidden unix files (.*) to be mail and attempts to send them.
• Mailer - Mailing works better under NAT.
• Mailer - Queue emails instead of failing if a mail host preference has not been provided.
• Multiple Sites - Sites without a host in their domain name is used as default for requests where there are no site that exactly matches the hostname.
• Multiple Sites - Each site has it's own Components folder (in with the site specific data) with extensions to provide site specific features.
• Scripting - Allow arguments to headers in with-open-http-resource.
• XSL Transformations - Disabled evaluation of XSL instructions in an entity referenced in an XSL template.
• XSL Transformations - Improved XSLT processing with a new experimental command called 'apply'.
• XSL Transformations - Experimental XPath 'ip:entity' function accepts a URI to represent the optional location of the entity.
• XSL Transformations - Fixed bug in xpath != with two booleans, which behaved same as = with two booleans (i.e. opposite of correct).
• XSL Transformations - Corrected xpath string comparisions using = and != to be case sensitive.
• XSL Transformations - Don't pass on DOCTYPE declaration and comments from source document in pages generated by XSLT (bug fix).
• XSL Transformations - Corrected issue with not using local variables when expanding template parameters
• Server - Customizable number of responders.
• Etc - Menus for Quit is now on the Apple menu as prescribed by MacOSX.
• Etc - The Problem Report has been moved to ~/Library/Logs/com.in-progress.Interaction/ and is no longer an item on the Windows menu.
• Etc - Cache Database has been moved to ~/Library/Caches/com.in-progress.com.Interaction/

iTools

Commercial; $349

Current Version: 9.0.4 (March 25, 2009)

Tenon Intersystems produces iTools for Mac OS X, which provides many of the graphical services offered by NetTen for use with Mac OS X's implementation of the Apache Web server (version 7 supports Apache 2). In addition to extensions and enhancements to the Mac OS X Apache web server, iTools provides a WEBmail server, a domain name server, a multihoming FTP server, an SSL encryption engine to support eCommerce, a caching engine with proxy support, and a Sherlock-savvy search engine.

Version 9.0.4 adds/changes the following:

• In addition to including the newest Apache 2.2.11, Tenon's iTools 9.0.4 now includes many improvements and bug fixes to iTools Administration of Apache, DNS and FTP.
• iTools enhancements include more efficient log rotation, security improvements that support out-of-the-box PCI compliance, an upgraded and more secure BIND, extensions to the built-in File Manager, advances to the proFTPd built-in FTP server, and the ability to tune Apache for extremely busy servers via the iTools GUI.
• New and updated open source add on packages include ImageMagick and phpThumb.

iVPN

Shareware; £14.99

Current Version: 4.1 (June 1, 2009)

From the iVPN web site: "iVPN is an application that makes use of the standards based PPTP and L2TP IPSec VPN server installed with Mac OS X. This VPN server is usually only available on Mac OS X Server and configured through the Server Admin application. iVPN makes it possible to use the same server utility on the client version of Mac OS X. All you have to do to set it up is to enter the user name and password that you want your VPN clients to use, the IP address range you want to give to your clients and then click start server. iVPN will handle all the other settings and start the VPN server."

Version 4.0 adds/changes the following:

• Fixed a bug with the IP address validation that prevented certain valid IP addresses from being used.

Do not use iVPN on Mac OS X Server; you will no longer be able to use Mac OS X's Server Admin to configure your VPN server if you do.

JRun

Commercial; $899

Current Version: Version 4 Updater 7 (November 26, 2007)

Adobe (formerly Macromedia, Inc.) produces the JRun Java application server, written in Java for Mac OS X. New features include drag-and-drop deploy, XDoclet integration, and optimized Macromedia Flash Player connectivity.

Version 4 Updater 7 fixes many bugs and includes the following enhancements:

• Sun JDK Support - JRun 4 Updater 7 supports JDK 1.6.0_01 and JDK 1.6.0_02.
• Updated JDBC drivers - JRun 4 Updater 7 kit includes version 3.6 build 0017 of the JRun JDBC drivers.
• Windows Support - JRun 4 Updater 7 supports Windows Vista.
• Mac OS X on Intel support - JRun4 Updater 7 supports Mac OS X 10.4 on Intel.
• 64-bit Support - JRun4 Updater 7 provides 64-bit support on Solaris-SPARC. Other 64-bit operating systems including Windows 64-bit and Solaris-x86 64-bit are not supported.
• IIS Support - JRun4 Updater 7 supports IIS7.
• Apache support - JRun4 Updater 7 supports Apache versions 2.2.x.
• SunOne Webserver Support - JRun4 Updater 7 supports SunOne Webserver 7.
• IBM JDK 1.5 Support: JRun 4 Updater 7 supports IBM JDK 1.5
• Performance gains in Web Clustering - Significant gains have been achieved in Web Cluster performance by fine tuning two specific areas - RMI calls and Data replication. A session replication now makes a single RMI call as against four to five earlier. Data replication has been optimized to backup data only on need basis instead of replicating on all calls. It has been further tuned to send only changes to the backup node instead of replicating the entire session object.

The online release notes have further information, including a complete list of bugfixes.

Kerio MailServer

Commercial; See text.

Current Version: 6.7.0 Patch 1 (June 8, 2009)

Kerio Technologies Inc. produces Kerio MailServer, an email server designed primarily for small to medium-sized organizations. Its critical components includes integrated ActiveSync support, McAfee anti-virus with dual anti-virus options using built-in third party plugins, multiple anti-spam technologies, cross-platform groupware functionality in Outlook, Entourage, Treos, Windows Mobile Devices and Kerio WebMail. Groupware features include shared and public email, calendars, contacts, notes and tasks. Users can be defined internally or managed through Microsoft Active Directory or Apple Open Directory. A migration tool for Microsoft Exchange is also inlcuded to migrate users and folders to Kerio MailServer. Kerio MailServer runs on Windows, Red Hat Linux, SUSE Linux, and Mac OS X.

Pricing varies, depending upon the desired number of users.

Version 6.7.0 Patch 1 makes a number of improvements, including the following:

• Some users from OpenDirectory were not be published in GAL public contacts.
• Fixed publishing of long user full name in GAL public contacts.
• Group name of the group synchronized from directory service was published as an email adddress in GAL public contacts.
• Group with a space character in the name could be duplicated in GAL public contacts.
• Corrupted auto-whitelist dababase file could cause unexpected shutdown of the spamserver process.

The release makes many other changes to the Administration Console various modules (Administration Console, WebMail, Web Administration, Synchronization Plug-in, Outlook Connector, etc.) that are more fully detailed in the complete release notes.

LetterRip Pro

Commercial; $395

Current Version: 4.07 (May 23, 2006)

LetterRip Software, LLC produces the LetterRip Pro mailing list server, which enables you to set up email discussion groups, send email announcements to large groups of people, and manage moderated discussions.

Version 4.07 adds/changes the following:

• Fixed problems handling internal bounces and the proper expiration of queue items.

LISTSERV

Commercial; see text.

Current Version: 15.5 (November 28, 2007)

L-Soft International, Inc. produces the LISTSERV line of email list management software for Mac OS X Version 10.4.2 and later. LISTSERV Classic is L-Soft's full-featured email list management software, featuring a high level of flexibility, scalability and performance. LISTSERV Lite is L-Soft's entry-level email list management software, primarily designed for customers with small workloads who do not require the more advanced features of the "Classic" product.

Evaluation copies are limited only in capacity, and are governed by an expiration date. An installation guide is available that explains the installation process.

LISTSERV is available in a variety of sizes and options; LISTSERV Classic runs between $500 and $9,400, whereas LISTSERV Lite runs between $450 - $2,800. See the LISTSERV license page for more information.

Version 15.5 makes a number of usability and other improvements that are fully detailed in the downloadable release notes.

LiteSpeed Web Server

Varies; see text.

Current Version: 4.0.5 (June 29, 2009)

From the LiteSpeed Web Server home page: "LiteSpeed Web Server is a high performance, secure and easy-to-use web server that can handle thousands of concurrent connections with a small memory footprint. It is less vulnerable when facing various attacks."

Features include:

• HTTP/1.1
  • Backward compatible with HTTP/1.0
  • Chunked Transfer Encoding
  • Basic Authentication (htpasswd and LDAP backend)
  • Entity Tag
  • Range/Multi-range Request
  • Static and dynamic content compression(gzip)
• IPv6 support
• API Connectivity
  • CGI/1.1
  • FastCGI
  • LSAPI (LiteSpeed SAPI)
  • AJP 1.3
  • Transparent Reverse Proxy (interface to back-end web server, application server)
• Dynamic Language Support
  • PHP (CGI,FastCGI,LSAPI), compatible with 3rd party PHP Accelerators.
  • JSP/Servlet (AJP)
  • Perl (CGI, FastCGI)
  • Ruby/Roby on Rails (CGI, FastCGI, LSAPI)
  • Python (CGI, FastCGI)
  • C/C++ (CGI, FastCGI, LSAPI)
• URL Rewriting
  • URL Rewriting is fully compatible with Apache's rewrite configuration
• .Htaccess Support
  • Apache compatible distributed per-directory Access Control and Authentication configuration.
• Request filtering
  • Perform deep inspection of request header and body, using Apache mod_security compatible configuration directives.
• MS Frontpage server extension 2002
  • Supports content publishing with MS Frontpage client.
• Virtual Hosting
  • Supports IP based and name based virtual hosting
• Security
  • LiteSpeed web server is desgined to be a secure web server. With chroot jail, IP level bandwidth throttling, connection accounting, strict HTTP request checking, and URL context filtering, DoS effects are minimized and the application backend is properly fenced away from the HTTP request layer reducing vulnerability.
  • High performance Secure HTTP (HTTPS): supports SSLv2, SSLv3 and TLSv1
  • Access Control at server, virtual host and directory (context) level
  • File system protection
  • HTTP Authentication
  • IP level throttling (Bandwidth and Request Rate)
  • Comprehensive IP level connection accounting
  • Hotlink protection
  • Strict HTTP request checking
  • Comprehensive protection for static files
  • External application firewall for dynamic content
  • CGI resources consumption limit
  • CGI suEXEC excution and chroot
  • Chroot whole server process[Enterprise Edition only]
• Reliability
  • Zero downtime maintanance (include reconfiguration, software upgrade)
  • Watch dog and Instant recovery maximizes up-time
  • Graceful shutdown, all requests in process will be completed.
  • Runs completely in the user space, OS reliability is not affected
  • CGI, Fast CGI and servlet engine run in standalone processes,the reliability of the web server is not affected by third party software.

The program is available in two editions:

• Standard Edition is free for both private and commercial use.
• Enterprise Edition is a commercial product line with enhanced features, security, and tuned for the best performance/scalability. Pricing varies from $499-$1299, with leasing options available.

Version 4.0.5 adds/changes the following:

• Added support for mod_auth_passthrough to seamlessly integrate with cPanel FrontPage extension.
• Implemented hacking shield to actively defend hacking attempts of buffer overflow.
• Fixed a browser compatibility issue by turning off GZIP compression when there is a custom "Content-Encoding" response header added by CGI script.
• Added license management in cPanel/WHM plug-in.

Macjordomo

Freeware

Current Version: 1.0.14 / 1.6a3 (December 15, 2005)

Macjordomo is a powerful, easy-to-use freeware listserver. Version 1.6a3 - the latest version for Mac OS X - makes the following changes:

• Added option to just ignore messages from non-subscribers (rather than send a notice)

Please visit the Macjordomo home page before downloading the program for the first time.

MailServe

Commercial; $15

Current Version: 2.1.7 (July 17, 2007) / 3.0.4 (February 4, 2008)

MailServe is a graphical application that helps you set up the built-in Postfix mail server on Mac OS X. It sets up SMTP, UW/IMAP, POP3 and Fetchmail services, including support for SSL and SMTP authentication.

By using MailServe in conjunction with its Fetchmail capability, you can funnel all of your email from remote mail servers to your own local server, and check email using POP or IMAP from that server instead.

Version 3.0.4 - the latest version for Mac OS X 10.5 - adds the following:

• Figured out how to get the Mail Queue feature working again in MailServe for Leopard. You can find the button that displays the Mail Queue panel when you Customize the Toolbar.

Mailtron Gateway

See text

Current Version: 1.3.2 / 3.0 (March 20, 2006)

Mailtron Gateway is a POP (and for Mac OS X, a POP/IMAP) email gateway from Studiotron Software that allows multiple people at a single domain to share a single email account. The license key that is required after the initial 30-day usage period is free for "Classic" Mac OS. Version 3.x (for Mac OS X only), however, comes as a fully-functional demo that runs for 30 days (except that he fetchmail daemon will not automatically run after a system restart) and can be registered for $69. The Mac OS X version features "industrial strength" mail forwarding using fetchmail, and automatic protocol detection, including IMAP.

Version 3.0 - the latest release for Mac OS X - adds/addresses the following:

• Fixed compatability with Mac OS X Tiger folder privileges.
• Integrated Kagi registration keys.

Manila

Commercial; $1,099

Current Version: 9.6 (October 9, 2006)

UserLand Software - founded by legendary Mac programmer Dave Winer - produces a number of web application server products that work not only on the Macintosh, but on Windows as well. Manila (formerly Frontier) is a comprehensive web scripting / content management system/ weblog publishing system that makes it simple for anyone to create and use web content, collaborate on projects, manage online discussion groups, podcast and share documents.

Downloads are available as free 30-day trials. Frontier includes an integrated HTTP server but works with third-party server software as well.

Manila 9.6 includes a large number of improvements and bug fixes that are fully detailed in the online release notes.

Men & Mice Suite

Commercial; see site.

Current Version: 6.0.2 (March 26, 2009)

Men & Mice produces DNS and IP management software that enables users, through a graphical interface, to simultaneously manage standard DNS and DHCP servers on different platforms, as well as keep track of IP addresses. The Men & Mice Suite comes in both an enterprise version and a small business version (the latter which was formerly called "QuickDNS"). The Suite is comprised of three components: a client, called "Men & Mice Management Console"; a data storage and web server, called "Men & Mice Central"; and DNS gateway software, called "Men & Mice Server Controller".

One component of the suite - the DNS Expert (a DNS analysis and monitoring product) - may be purchased separately and deployed independently from the rest of the suite.

Version 6.0.2 adds/changes the following:

All Components

• When starting daemons from command line, any unrecognized arguments will cause error message

Management Console

• Disables "Convert to Range..." unless user has IPAM license
• History window shows changes to ranges as "DHCP Scope / IP Range" because these changes include changes to scopes
• Quick filter now handles newly created/updated custom fields better
• Disables opening Custom field editing window for IPs in scopes if there are no Custom fields
• Disabled syntax checker that didn't allow underscores in zone names
• Improved syntax checker in DNS Server Options dialog
• Editing "Run-once" scheduled scripts is now possible
• Promote zone command disabled when master server for zone is alive
• Right-click menu in IPAM window no longer shows both "Open" and "Open..." at the same time
• Fixed alignment in Device Details window, preventing non-custom fields from disappearing when there were loads of custom fields
• Fixed bug in "Fix..." feature in DHCP when syncing reservations
• Creating a scope on an ISC/IOS server no longer creates two scope instances

Command Line Interface

• ReplaceZone command now honors the record order used in the zone file used to replace the zone data
• ReplaceZone command now logs "Zone Replaced" in history, instead of logging every record as deleted/created
• Fixed crash in logmessages command
• Fixed crash when saving scope options in cmdline

Central

• Now allows deletion of last NS record for zone if another NS record is added in the same transaction
• Run-once scheduled scripts now only run once, instead of indefinitely in a tight loop
• After saving a zone for the first time, user no longer has to close and re-open it to edit the SOA record
• Opening large scopes no longer times out after 2 minutes
• Fixed SQL function mm_dottedformat
• Removing non-A records from the Device dialog box now works as expected
• Fixed bug that was causing Promote Zone to fail sporadically because it was trying to talk to the dead master server
• Properly forward error to the GUI Console if a Server Controller crashes while responding to a request

Server Controller

• Properly set server context when resetting "netsh" on Windows OS
• Changed log level of getXXData requests from infoMajor to info to reduce chattiness in log files
• Option parsing on Cisco servers now works correctly
• Web interface
• Added tasks that allow user to Add and Delete zones (not part of general release)
• Utilization Report now works correctly when no parameters are specified
• Web UI no longer erases custom fields when editing device details
• Range Utilization report now calculates free/used/utilized correctly
• Don't display "NULL" user name when logged in through SSO
• Removed check that prevented user from deleting first record in list
• Fixed access permissions problems, where user with no access to zone could edit it through IPAM
• Added button to delete host in IPAM view
• Code for selecting the last used tab now works correctly when said tab is no longer available

Installers

• Unix web installer now tells Apache to not reuse mmxmlint connections. Fixes "Bad gateway" errors some customers were experiencing

MP3 Sushi

Open source; optional fee

Current Version: 1.4.1 (March 27, 2003) / 1.5 (January 4, 2004)

MP3 Sushi is a set of two applications: MP3 Sushi Server and MP3 Buddies. MP3 Sushi Server allows you to turn your Mac into a jukebox or a radio broadcast station in a few clicks, allowing you to share and stream your music among a local network or the Internet. Thanks to the Rendezvous technology (aka ZeroConf), MP3 Buddies makes it easy to find every jukebox and radio server on your local network. Once MP3 Buddies is launched on a user computer, a list of servers is displayed and in just one click the user can browse the jukebox songs in his favorite navigator or listen to the radio in iTunes.

Version 1.5 adds/changes the following:

• [FIX] Added support for Panther (Mac OS X 10.3): the Radio now works properly
• [MODIF] Updated the Jukebox component (gnump3d 2.6)
• [NEW] The songs can be searched via the Jukebox Web interface
• [NEW] New themes for the Jukebox Web interface
• [FIX] The "Check Version Update" feature works again
• [MODIF] Display the name of the server instead of its IP

Muffin

Current Version: 0.9.3a (April 4, 2000)

Muffin is an interesting beast. It's one of the few Java applications that I list on the Orchard (if I were to include every Java application that had useful Internet capability, I would never have time to maintain this site), and while its functionality is useful for users of all levels, installing and getting it up and running - while not difficult for experienced Mac users - is not for the faint of heart.

Basically, though, I include it here because it provides incredibly useful functionality that is not really provided by any other free Macintosh software.

Briefly, Muffin is a World Wide Web "filtering system" that acts as a proxy server to filter out content to your own specifications. It can be used to filter any or all of the following:

• animations
• cookies
• Java applets
• JavaScripts
• referer response information

 . . . and a whole lot more. Its core features include:

• Written entirely in Java. Requires JDK 1.1
• Runs on Unix, Windows 95/NT, and Macintosh.
• Freely available under the GNU General Public License.
• Support for HTTP/0.9, HTTP/1.0, HTTP/1.1, and SSL (https).
• Graphical user interface and command-line interface.
• Remote admin interface using HTML forms.
• Includes several filters which can remove cookies, kill GIF animations, remove advertisements, add/remove/modify arbitrary HTML tags (like blink), remove Java applets and JavaScript, user-agent spoofing, rewrite URLs, and much more.
• View all HTTP headers to aid in CGI development and debugging.
• Users can write their own filters in Java using the provided filter interfaces.

Figuring out how to run Muffin on Classic Mac OS from the instructions on its Web site is needlessly intimidating. To save you the trouble, I've written a simplified set of instructions here:

To use Muffin, you'll need the following downloads (all free):

1. Mac OS Runtime for Java (otherwise known as "MRJ" and available on the Orchard's Helper apps page).
2. Apple's MRJ Software Development Kit.
3. The muffin.jar Java archive (control-click and save to disk if you have trouble with this link).

Once you have the two Apple MRJ products installed, you'll need to:

1. Place the muffin.jar file into the place where you want it to reside permanently.
2. Drag muffin.jar onto the JBindery application (located in the MRJ SDK folder under Tools | Application Builders | JBindery).
3. Enter "org.doit.muffin.Main" in the Class name: field, then click on the Classpath icon to make sure that the muffin.jar file is in the class path.
4. Finally, using the File menu select Save As... to give it a name and save it as an application. That's it!

By the way: you'll never have to do this again; now, you'll be able to double-click on the applet whenever you want to use Muffin (but you'll have to be online for it to run).

In order to use Muffin, you'll have to configure your Web browser's proxy settings (dig around your browser's preferences to find this) to point to Muffin so that it can intervene between you and the Web (which is exactly what a proxy server does). This is accomplished by setting your proxy server address to 127.0.0.1 (the magic "loopback" IP address that points to your own machine) and using port 51966.

Sit back, configure Muffin from its "Edit" menu, and you'll be ready to roll! It uses about 6-7 MB of RAM when running, and has excellent performance under MRJ 2.2.

For more information on Muffin, including documentation, visit the Muffin Web site.

NFS Manager

Shareware; €17.85

Current Version: 3.1 (March 29, 2008)

From the NFS Manager home page: "NFS Manager is a graphical user interface to control all built-in NFS features of Mac OS X. It can manage a whole network of Mac OS X computers to setup a distributed NFS file system via a few simple mouse clicks. The application is designed to use the latest technologies available in Mac OS X, like Open Directory, Bonjour, or Kerberos. If your network is setup as a Kerberos realm, secure NFS with authenticated and encrypted connections can be configured."

NFS Manager 3 is for Mac OS X Leopard or later only. Previous generations of Mac OS X use a very different implementation of NFS and therefore need a different management tool. Use NFS Manager 2 for legacy systems (Mac OS X 10.2.5 to 10.4.11).

Version 3.0 was redeveloped completely for Mac OS X 10.5 because Leopard uses a different NFS implementation. All aspects of the application have changed. Version 3.1 makes the following additional changes:

• Because Mac OS X 10.5.3 is fixing most of the problems of the Leopard NFS server implementation, some workarounds in the software could be deactivated.
• Input sheets receiving textual input have been optimized to complete all edit operations before the sheet is closed.
• A problem has been corrected where automount entries with numeric options might not have been re-read correctly by the application after those options had been set to non-default values.

Paros

Open source; $0

Current Version: 3.2.13 (August 8, 2006)

Paros is an essential tool for all web application developers and web site security auditors. It is a Java-based HTTP/HTTPS proxy for assessing web application vulnerability, supporting editing/viewing HTTP messages on-the-fly. Features include spiders, client certificate, proxy-chaining, intelligent scanning for XSS and SQL injections, and more.

Version 3.2.13 adds/changes the following:

• New: skipping designated URL in spider. Use options to set the spider.
• New: auto update menu and periodic check for update (Windows and Linux platform only).
• Fix: the use of new external library caused slower performance of proxy. Restored to older library.

See the installation instructions for more information.

Phantom

Commercial; see site.

Current Version: 2.2.5 (January 15, 2003) / 2.5 (August 24, 2003)

Aktiv Software Corporation produces the the Phantom web crawler/search robot formerly distributed by Maxum. Running on your web server, Phantom makes it possible for users to search your web site or other web sites. Phantom works like AltaVista (but on a smaller scale) so it can provide searching for remote web sites you specify using its built-in web crawler. Phantom supports indexing thousands of documents in a variety of formats including text, HTML and PDF. With its HTML form interface and web-based administration, Phantom makes it simple to implement basic searching but is also completely customizable for the more advanced Webmaster.

Post.Office

Commercial; $295

Current Version: 3.8.4 Rev. 115 (July 24, 2008)

For Mac OS X, Tenon has developed a direct port of the popular Post.Office mail server / list server, bundled with the SpamAssassin plugin. Post.Office is a SMTP/POP3/IMAP messaging server designed to meet the needs of small and mid-sized ISPs.

Version 3.8.4 Rev. 115 adds/changes the following:

• Enchanced SPAM filtering (Ability to disable filters; Ability to import and export filters; Updated SpamAssassin to version 3.2.4)
• Mac OS X Leopard compatible
• Unified Licensing

Privoxy

Open source; $0

Current Version: 3.0.10-1 (December 10, 2008) / 3.0.11 (February 23, 2009)

From the Privoxy web site: "Privoxy is a web proxy with advanced filtering capabilities for protecting privacy, modifying web page content, managing cookies, controlling access, and removing ads, banners, pop-ups and other obnoxious Internet junk. Privoxy has a very flexible configuration and can be customized to suit individual needs and tastes. Privoxy has application for both stand-alone systems and multi-user networks." Privoxy is freeware, released under the GNU General Public License.

Version 3.0.10-1 (the latest Mac OS X release) is a bugfix release; version 3.0.11 (the latest source release) adds/changes the following:

• On most platforms, outgoing connections can be kept alive and reused if the server supports it. Whether or not this improves things depends on the connection.
• When dropping privileges, membership in supplementary groups is given up as well. Not doing that can lead to Privoxy running with more rights than necessary and violates the principle of least privilege. Users of the --user option are advised to update.
• Passing invalid users or groups with the --user option didn't lead to program exit. Regression introduced in 3.0.7.
• The match all section has been moved from default.action to a new file called match-all.action. As a result the default.action no longer needs to be touched by the user and can be safely overwritten by updates.
• The standard.action file has been removed. Its content is now part of the default.action file.
• In some situations the logged content length was slightly too low.
• Crunched requests are logged with their own log level. If you used "debug 1" in the past, you'll probably want to additionally enable "debug 1024", otherwise only passed requests will be logged. If you only care about crunched requests, simply replace "debug 1" with "debug 1024".
• The crunch reason has been moved to the beginning of the crunch message. For HTTP URLs, the protocol is logged as well.
• Log messages are shortened by printing the thread id on its own (as opposed to putting it inside the string "Privoxy()").
• The config option socket-timeout has been added to control the time Privoxy waits for data to arrive on a socket.
• Support for remote toggling is controlled by the configure option --disable-toggle only. In previous versions it also depended on the action editor and thus configuring with the --disable-editor option would disable remote toggling support as well.
• Requests with invalid HTTP versions are rejected.
• The template symbol @date@ can be used to include a date(1)-like time string.
• Responses from shoutcast servers are accepted again.
• The hide-forwarded-for-headers action has been replaced with the change-x-forwarded-for{} action which can also be used to add X-Forwarded-For headers. The latter functionality already existed in Privoxy versions prior to 3.0.7 but has been removed as it was often used unintentionally (by not using the hide-forwarded-for-headers action).
• A "clear log" view option was added to the mingw32 version to clear out all of the lines in the Privoxy log window.
• The mingw32 version uses "critical sections" now, which prevents log message corruption under load. As a side effect, the "no thread-safe PRNG" warning could be removed as well.
• The mingw32 version's task bar icon is crossed out and the color changed to gray if Privoxy is toggled off.

The online release notes have more details.

PureFTPd Manager

Open source; $0

Current Version: 1.7 (December 20, 2007)

PureFTPd Manager is a simple Cocoa frontend to PureFTPd, "a free (BSD), secure, production-quality and standard-conformant FTP server based upon Troll-FTPd", for Mac OS X. PureFTPd Manager bundles pureftpd 1.0.18 for both Jaguar (10.2.x) and pureftpd 1.0.21 for Panther/Tiger (10.3.x, 10.4.x).

Version 1.7 adds/changes the following:

• Runs on Mac OS 10.2+ and has successfully been tested with Mac OS 10.5 (fresh install and update scenarios).

The online release notes have more details.

Please note that the download below includes separate versions for Mac OS X 10.2/10.3 and Mac OS X 10.4.

Radiator

Commercial; see text.

Current Version: 4.4 (March 11, 2009)

Open System Consultants Pty Ltd produces Radiator, one of two RADIUS implementations for the Mac that I'm aware of. Radiator is written in Perl and runs an just about any OS, including Mac OS 9 and Mac OS X.

Version 4.4 makes the following changes:

• Fixed a problem with AuthBy WIMAX which would fail when TTLS-MSCHAPV2 was used. Improved goodies/wimaxtest to support -mschapv2 flag to cause TTLS-MSCHAPV2 authentication.
• Fixed a memory leak in ClientListSQL and ClientListLDAP where Client clauses may not get reclaimed when the client list is refreshed.
• Fixed a probem with ServerHTTP where manual editing of a file larger than 16k would cause error '413 Request Entity Too Large'. Limit increase to 1Mb.
• Fixed a probem with AuthBy NTLM. UsernameMatchesWithoutRealm worked correctly with MSCHAPV2, but not with PAP or MSCHAPV1.
• Altered the behaviour of TLS_SubjectAltNameURI in all StreamTLS based protocols (such as RadSec, DIAMETER etc.) at the suggestion of Stefan Winter. Now TLS_SubjectAltNameURI imposes an additional mandatory constraint on the peer certificate. If TLS_SubjectAltNameURI is defined it MUST match at least one subjectAltNAme:URI in the peer certificate, in addition to any other certificate verfication requirements (such as DNS name, host name etc). Requires NetSSLeay 1.30 or later.
• Improvements to behaviour of passwords in the form {clear}password, so they will work with CHAP, MSCHAP and MSCHAPV2.
• Fixed collisions between some VSAs in dicitonary: renamed Cisco attributes Account-Info, Service-Info, Command-Code, Control-Info to have 'Cisco-' prefix. Renamed Command-Code to Enterasys-Command-Code.
• AuthBy RSAAM now honours UsernameMatchesWithoutRealm and other username transformation parameters.
• Fixed a problem where EAP-MSCHAPV2 would incorrectly authenticate users when misconfigured with AuthBy RSAAM.
• EAP Generic Token Card now honours UsernameMatchesWithoutRealm.
• Tested TTLS-MSCHAPV2 with iPhone 2.0. OK.
• Added instructions and Portfile for installing Radiator on MacOSX.
• Added goodies/lancom-radsec.txt, instructions and hints for configuring a Lancom L-54g wireless Access Point to authenticate using an external RadSec server.
• Tested against Lancom L-54g wireless Access Point configured for external RadSec authentication for 802.1X. OK.
• Improvements to AuthBy WIMAX, in order to support Alvarion WiMAX equipment and various other operator requirements, requested by Manuel Kasper. Can now use AuthSelect and AuthColumnDef to alter the SQL authentication query and add reply attributes. You can customise other SQL queries using during WiMAX processing with GetCachedKeyQuery, GetHotlineProfileQuery, GetQosProfileQuery. Can now handle accounting using AcctSQLStatement the same as AuthBy SQL.
• Fixed a problem where use of Client CIDR addresses would not alway result in the correct Client being found.
• In AutbBy LDAP_APS, PasswordServerAddress was working for PAP, but did not work as expected for MSCHAP and Digest-MD5 authentication.
• Added OSC-Version-Identifier to dictionary.
• Fixed typos in dictionary. Cisco-Maximum-Time was Cisco-Maximun-Time and Cisco-Maximum-Channels was Cisco-Maximun-Channels.
• Server TACACSPLUS now sets OSC-Version-Identifier in the RADIUS requests from the version number in the incoming Tacacs+ request. The Major and Minor numbers are combined in a single integer as per the Tacacs+ specification (i.e. version 0 is represented as 192 and version 1 is represented as 193).
• Incoming requests processed by Server RADSEC were logged twice.
• Can now properly send Starent VSAs. Receiving was already supported.
• Fixed a problem that prevented reply attributes from a TTLS inner reply being sent in the reply to a session resumption.
• Fixed a problem where certain malformed RADIUS requests could cause a hard loop.
• Accounting request that are REJECTED (due, say, to UsernameCharset) are now logged at DEBUG level.
• Added Trapeze Networks attributes to dictionary.
• AuthBy RADIUS would previously die if it was unable to bind to a socket (for example if a non-existent BindAddress was used).
• AuthBy WIMAX now supports ASCII encoding of WiMAX-Packet-Flow-Descriptor and WiMAX-QoS-Descriptor. They are parsed and converted to the WiMAX required binary format automatically.
• Improvements to Solaris scripts and config file for use by the Solaris package
• When LogMicroseconds is used, the microseconds are now left padded with zeroes for easier reading.
• Can now handle Change-Filter-Request requests in AuthINTERNAL and others. Accept will result in a Change-Filter-Request-ACKed replay and a reject will cause a Change-Filter-Request-NAKed.
• Fixed a problem with AuthBy RADSEC caused by the recently added LocalAddress support: If the Host address is an IPV6 address, an error with binding to 0.0.0.0:0 was reported. The default bind address is now determined by the operating system, except when LocalAddress is specified. Can now specify LocalAddress as an IPV6 address.
• Error messages from Server TACACSPLUS now include the originating address and port number. Requested by Andrew D. Clark.
• Added various Nortel OME6500/OM5000 VSAs to dictionary.
• Added new option -leap to radpwtst for testing EAP-LEAP.
• Fixed a number of mispellings from 'redespatched' to 'redispatched'
• Fixed some incorrect behaviour of Resolver under perl5.8.8 on some platforms.
• Improvements to AuthBy RSAAM so that chains of RSAAM authenticators with different Policy settings will work correctly.
• Added support for Alcatel/Lucent ESAM VSAs (vendor ID 637) which have non-standard VSA format. Also added A-ESAM-* entries to dictionary.
• AuthBy LDAPDIGIPASS didn't close its connection if HoldServerConnection wasn't set.
• Added precompiled RPM for Authen-Digipass for perl 5.10 (Authen-Digipass-1.9-1.i686.rpm is for perl 5.8 only).
• In AuthBy RSAAM, added translations for some further prompts, POLICY_VIOLATION_* etc. Improved prompts during system-generated-PIN mode. Improved support for AM server failover. AM Server failure now causes an IGNORE, and AuthByPolicy ContinueWhileIgnore can be used to try multiple AM servers in sequence until a successful connection is made. Changes to chaining of RSAAM clauses mean that in order to try one RSAAM Policy, followed by another you must use the AuthByPolicy ContinueUntilAcceptOrChallenge.
• Added support for new AuthByPolicy settings of ContinueWhileChallenge and ContinueUntilChallenge.
• Added support for EAPTLS_RequireClientCert to TTLS and PEAP. Setting this optional parameter now requires the clinet to present a valid client certificate during the TLS handshake.
• Improved documentation in AuthBy ACE examples. Improved misleading user messages when AuthBy ACE is used with AM 7.1. Fixed problems with Authen-ACE4 when used with AM 7.1 and system-generated PINs, requires Authen-ACE4 1.3. New Authen-ACE4 1.3 ppm packages for Windows, including support for Perl 5.10 on Windows.
• Added precompiled Authen-Digipass ppm package for perl 5.10 on Windows.
• Improved session resumption in PEAP. Previously, resumed sessions triggered an inner authentication. Now the inner authentication is reused too.
• Added new hook EAPTLS_CommonNameHook for EAP TLS support. Normally EAP-TLS attempts to match a CN in the client certificate against either the User-Name or EAP identity (either with or without domain names). This hook allows you to extend this matching and match a certificate CN against some other user attribute, such as the Calling-Station-Id as required by some WiMAX devices.
• Added EAP TLS initialization to add the SHA256 digest, required for some WiMAX devices and certificates. Requested by Jinsong Zhu. Requires Net-SSLeay 1.35 plus latest SVN patches or later and OpenSSL 0.9.8i or later.
• Fixed a problem with special character %J, which incorrectly had leading spaces before the day number.
• Added Citrix-CAG-Groups to dictionary.
• Added beta version of a new AuthBy EAPBALANCE module. EAPBALANCE distributes EAP conversations among multiple back ends and ensures that a given conversation always goes to the same backend, even in the face of backend failures. Suitable for use with FarmSize for high performance EAP-capable systems on multi-core hosts.
• Fixed some errors in the types of WiMAX attributes in dictionary. WiMAX-HTTP-Redirection-Rule changed from binary to string. Added WiMAX-Time-Of-Day-Time. Added NAS-Filter-Rule. Requested by Garima Mahadik.
• Timestamp was incorrectly added twice if a request was redirected through Handler, say by AuthHANDLER or similar.
• Changes so that the plaintext password is not logged at debug level during Tacacs authentication. Requested by Markus Moeller.
• Fixed some problems with mixed placeholders causing crashes on Windows when ODBC in use and when Quote: fails to match properly. Improved error reporting in SqlDb when a prepare croaks. Improvements to nested special character matching to exclude trival matched caused by embedded curlies.
• In AuthBy POP3, paramters Host, Port and LocalAddr did not have packet-specific data available for special characters.
• Fixed a problem with incorrect statistics for dropped requests when inner TTLS and PEAP requests are proxied.
• Improved handling of Security Questions prompts in AuthBy RSAAM.
• Fixed AuthBy IMAP so it will work with Mail-IMAP versions later than 2.99, using the new Mail::IMAP RawSocket call.
• Fixed a problem with Server HTTP where a configuration that contained an AuthLog clause would incorrectly be saved as an AuthBy clause.
• AuthBy WIMAX incorrectly set Session-Timeout to the absolute epoch time, rather than the relative KeyLifetime.
• Fixed a problem in AuthBy WIMAX with DHCP keys that could cause a crash. Also fixed a problem with session resumption when Pseudo Ids are in use. goodies/wimaxtest now suports session resumption with a [-reauth count] command line argument.
• Fixed a problem with reused session authentication in EAP-TTLS.
• Added sample configuration files for Radiator, Cisco Nexus 7000 and sample debug file, showing how to set up RBAC - Role-Based Access Control on the Cisco Nexus 7000.
• Fixed a problem when AuthBy RADIUS tries to forward to a non-existent DNS name, a crash could occur.
• Ensure TLS does not resume sessions unless EAPTLS_SessionResumption is set.
• Added support for new parameter in AuthBy WIMAX. MSKInMPPEKeys forces the MSK to be encoded in MS-MPPE-Send-Key and MS-MPPE-Recv-Key, as well as the usual WiMAX-MSK reply attributes. This is required by some non-compliant clients, such as some Alcatel-Lucent devices.
• Improved behaviour of AuthBy WIMAX when creating and setting WiMAX-AAA-Session-ID to be compatible with more WiMAX clients. WiMAX-AAA-Session-ID is now only allocated and returned in the Access-Accept. Also made more SQL queries configurable. Paramete.
• Changed primary key in device_session in sample wimax.sql to match earlier changes to session saving based on session ID instead of NAI.

The software is available for online purchase for $840 - $7,140.

Radio UserLand

Commercial; $39.95

Current Version: 8.2 (September 6, 2005)

UserLand Software - founded by legendary Mac programmer Dave Winer - produces a number of web application server products that work not only on the Macintosh, but on Windows as well. Radio is a $39.95 Web application development and runtime environment. Radio includes a bundled application that streams news from authoritative publications (such as Red Herring, Wired News, Salon, CNN, Reuters, the San Jose Mercury-News, Motley Fool, Internet.Com, and from weblogs such as Tomalak's Realm, AppleSurf, Slashdot.Org, XML.Com, Freshmeat and Scripting News) and allows you to select stories for publishing on your own weblog, or "Blog". Radio supports RSS 0.90 or greater, <scriptingNews> 1.0 or greater for input; and RSS 0.92 for output.

Downloads are available as free 30-day trials. Radio includes an integrated HTTP server but works with third-party server software as well.

Version 8.2 includes many upstreaming improvements, new features for Radio's folder viewer, and additional bug fixes and developer features. The Radio 8.2 release does not include a new application file to upgrade. Simply update Radio.root to get the new version.

RumorMill

Shareware; $35-$90

Current Version: 1.3.4 (November 7, 2002)

RumorMill (formerly made by Stairwars Software, creators of Interarchy), is the only shareware NNTP news server for the Mac. Although this server is not really designed to handle a full modern-day (40,000+ groups) newsfeed, the software is quite powerful, and quite easy to administer. Version 1.3.4 adds/changes the following:

• Fixed a bug that broke posting to moderated groups
• Included a missing error string
• Added an "X-Trace" header
• Brought the "NNTP-Posting-Host" header into common usage standards
• Fixed a bug that could cause database compression to run at the wrong time
• Fixed a bug that could cause the log file to not be trimmed to specified length
• Fixed a set of bugs that could cause improper responses to NEWNEWS and related commands from clients
• Add uptime to daily EMails
• Fixed a number of bugs that could cause errors claiming memory was low (in the log file)
• Fixed RumorMill so that it will not POST articles to a downstream server that originally came from another server
• Fixed a bug where the ARTICLE command could return the wrong article

RumorMill requires a 680x0 or Power Mac running Mac OS 7.1 or higher (the setup application, though, requires Mac OS 7.6 or higher). The program is shareware with a fee of $90 for commercial use, $35 for private or educational use. RumorMill 1.3.x is a $15 update to registered users of RumorMill 1.2. The authors hope to carbonize RumorMill for use on Mac OS X some time in late 2002. The server portion will be ported first; the setup program will be ported later. There will be no upgrade charge to registered users of version 1.3.

Rumpus

Commercial; see text.

Current Version: 3.5.6 (May 12, 2005) / 6.0.7 (June 2, 2009)

Maxum Development produces the Rumpus FTP server, featuring:

• Customizable Web File Management
• File Upload Notices Via E-Mail, AppleScript Or Unix Shell Command
• Full, On-The-Fly Support For MacBinary and BinHex Formats
• Real-time Activity Graphs
• 4 Separate Log Files
• Built-In Log Rolling
• Activity Reporting, Including User Session Transcripts
• Automatic Hack Attempt Recognition and Blocking
• Folder-By-Folder Access Restrictions
• Web-Based User Administration And User Password Resets
• Support For "Port Forwarding" Private LAN Bridges
• Automatically Expiring User Accounts
• User Account Size And Transfer Rate Restrictions

Version 6.0.7 - the latest version for Mac OS X - adds/changes the following:

• Corrected a bug that could cause user account listings to display garbage data in the Activity Monitor or FileWatch.
• Simplified transcript memory management.
• Increased stack size of server worker threads to avoid low memory conditions.
• Minor changes to drag and drop applet for Safari 4 compatibility and for optional removal of the "Logout" button on "upload complete" display.

Rumpus comes in two editions: standard and professional. The standard version supports up to 32 simultaneous users and 32 user accounts defined in Rumpus' built-in security. For larger sites and ISPs, Rumpus Pro supports up to 256 simultaneous connections, and user accounts defined in built-in security are limited only by RAM. Besides these differences, the Standard and Pro versions are identical. Pricing for Rumpus standard ranges from $249 (1 server) to $1,494 (10 servers); pricing for Rumpus professional ranges from $395 (1 server) to $2,370 (10 servers). The Rumpus ordering page has more information.

Secure Shell Helper

Donationware

Current Version: 1.3 (July 6, 2007)

Secure Shell Helper (formerly SSH Admin) is a useful little utility that allows you to configure Mac OS X's command-line-based OpenSSH (Secure SHell) server application. Secure Shell Helper allows you to do the following:

• Control who's allowed to access your account
• Generate new OpenSSH keys
• View/Export your Public Keys
• Setup and Control the SSH Server
• Easy to use Wizard allows you to configure the server and personal identity

Version 1.3 adds/changes the following:

• Bug Fixes.

Mac OS X 10.1 or higher is recommended. The software is free, and the source code is available upon request, and the author does accept donations.

SHOUTcast

Freeware

Current Version: 1.9.8 (February 28, 2007)

From the SHOUTcast web site:

"SHOUTcast is a free-of-charge audio homesteading solution. It permits anyone on the internet to broadcast audio from their PC to listeners across the Internet or any other IP-based network (Office LANs, college campuses, etc.). SHOUTcast's underlying technology for audio delivery is MPEG Layer 3, also known as MP3 technology. The SHOUTcast system can deliver audio in a live situation, or can deliver audio on-demand for archived broadcasts.

"This SHOUTcast server runs on Mac OS X and Mac OS X Server 2. It is a UNIX-style app without an Aqua interface, and has to be run in a terminal window. This server should be considered beta."

Version 1.9.8 adds/changes the following:

• This release is a security fix release which fixes the Source Port password/script exploits.

SnapperHead

Current Version: 4.6

SnapperHead is an unusual and fun application that allows you to serve up captures of your screen to anyone with a web browser (not guaranteed to be compatible with Windows browsers, however). Think of it as a special-purpose web server: you simply launch SnapperHead, then send a friend your IP address (it is shown on the SnapperHead window under "Snaps Served"). When they type that Internet address into the location field of a web browser, they will be sent - as an image in their browser - a picture of your screen. That's all SnapperHead does, but it does it well. SnapperHead is absolutely free (although the author could use a donation), and is Carbonized to run under Mac OS 8.5.1 or higher, with Carbon Lib 1.2 or higher. Version 4.6 adds/changes the following:

• This version fixes a number of longstanding bugs, and is a recommended update for all SnapperHead users.

Spamphibian

Commercial; $650

Current Version: 1.2 (September 21, 2006)

Outspring Inc. produces Spamphibian (formerly Spamcaster Gateway), which is a spam fighting solution that is setup between an organization's email server and the rest of the Internet, evaluating all incoming emails. In addition to spam, unwanted emails can also contain attachments with viruses, spyware, adware and phishes. The content of unwanted emails constantly changes.

Outspring has a team of spam analysts who collect, qualify, and create rules for the thousands of new variations of unwanted emails on a daily basis. Subscribers to Outspring's Spamcaster Service (1-year included with Spamphibian purchase) will automatically receive frequent rule updates. No further action is required. Outspring's rules are designed to avoid false-positives to prevent Spamphibian Gateway from stopping good emails from reaching end-users.

The product does not require that the user maintain their own email server. Administrators can configure Spamphibian to filter email prior to delivery to their ISP. Features include:

• Quick and easy setup and configuration
• Remote administration tool allows admin to control Spamphibian from their desktop.
• Uses filter data from a wide variety of sources.
• Filter data automatically updated daily.
• No "training" required. Begins stopping spam immediately.
• Multiple DNS Blacklist support.
• Versatile DNS Blacklist options: terminate connection or quarantine.
• User-definable white lists and black lists.
• User-definable filter rules.
• Supports import/export of filter rules.
• Graphs that can be customized by the user.
• Easy management of quarantined mail.
• Mac OS X native application set.
• Works with existing SMTP mail servers.
• Supports unlimited number of domains.
• No per-domain or per-user fees.
• Domain specific configuration of filter settings.

Version 1.2 adds/changes the following:

• Regular Expressions are now case sensitive and work properly on message headers and decoded messages' content.
• Spamphibian Admin no longer converts Regular Expressions to lower case.
• Improved detection of URLs and domains.
• Fixed a bug where a message's text part was not detected as text and therefore wasn't scanned.
• Fixed a Universal Binary bug related to IPs, both the Admin and the Gateway now correctly support IP address & rules on Intel Mac.
• Fixed a bug which caused Spamphibian Gateway to stop processing incoming messages after receiving an empty rule list.
• Improved message scanning performance.

Spamphibian is $650, which includes a 1-year subscription to the Spamcaster service that provides automatic and frequent database updates.

SpeedManiac

Shareware; $9.95

Current Version: 1.33

Like Muffin, above, SpeedManiac is a World Wide Web "filtering system" that acts as a proxy server to filter out content to your own specifications. However, it's not written in Java; it's a native Mac OS X application that is much easier to set up and use. While it cannot filter the variety of things that Muffin can, it is capable of filtering graphics, selected sites, and Flash animations, which is good enough for mere mortals who might not have the time to master Muffin.

In order to use SpeedManiac, you'll have to configure your Web browser's proxy settings (dig around your browser's preferences to find this) to point to the program so that it can intervene between you and the Web (which is exactly what a proxy server does). Here's how you do that:

• Open the System Preferences.
• Click on the Network icon, select your usual connection method.
• Click on lock if required, and provide your password so that you can edit the settings here.
• Click on the Proxies tab.
• Check the box for HTTP Proxy, enter 127.0.0.1, enter 1080 for port.
• Click on the Apply Now button.

Version 1.33 adds/changes the following:

• When a server was not found, we could end up connecting to the last good server again.

SpeedManiac - which is written by Ricardo Batista, celebrated author of the Extensions Manager for the "Classic" Mac OS - is shareware, and works as a trial version for 15 days.

SSH Agent

Open source; $0

Current Version: 1.1 (May 10, 2005)

SSH Agent is a graphical front-end to some of the OpenSSH tools included with Mac OS X. Specifically, it allows you to start an ssh-agent, generate identities, and add identities to an agent. Additionally, it allows you to make the ssh-agent global so that, for example, Project Builder and CVL can use it to do version control over SSH, and it has some functionality to set-up a secure tunnel.

Version 1.1 adds/changes the following:

• Conceptually, SSH Agent has changed from a window on the ssh-agent process to an ssh identity manager. This has the following consequences:
  • ssh identities are no longer treated as documents. Instead, SSH Agent's main window is a view on the identities in your .ssh directory.
  • Instead of adding identities to the agent, the interface let's you activate identities. Identities can be flagged as Default, and the preferences lets you add the Default identities when the application is launched.
  • There is an Agent Inspector which shows the details of the ssh-agent process. (It also allows you to detach the application from the process, allowing faceless operation.)
• Other changes:
  • Different preferences format. If you're only trying out 1.1 make sure you backup your nl.uu.phil.* preferences.
  • Eye candy: An animated bubble showing the number of active identities and more beautiful icons.
• Missing, incomplete, or broken:
  • The keychain interaction might be broken.
  • The version checking code is incomplete.
  • No documentation, except this page.
  • No source package yet.
  • No internationalization.

SurgeMail

Commercial; see site.

Current Version: 4.0u3 (May 28, 2009)

NetWin, Ltd. produces the industrial-strength SurgeMail "carrier class" email server that supports any number of users or domains, virus scanning, spam filtering, integrated webmail access, integrated WAP support, and fast browser based administration tools. SurgeMail supports all relevant RFC protocols: POP3, SMTP, IMAP4, LDAP, HTTP, and TLS/SSL, and has optional calendar, file sharing, instant messaging, forum, and chat room modules available.

Version 4.0u3 - the first new production release in over a year - makes the following changes:

• New: SurgeWeb new "Ajax / Web2" high performance web email interface (still being worked on though, for more information see surgeweb documentation, surgeweb changes, and known bug list )
• New: New archive searching interface with CRC validation to confirm the messages in the achive have not been tampered with
• New: Arbitrary error translation of error messages (g_error_xlate)
• New: Setting to adjust max number of messages in a folder (g_imap_max_messages) - defaults to 200,000
• New: Imap burst loggin to delivery log so message->uid renames can be traced
• New: Default page not returned for invalid cgi requests - stops "dumb tools" reporting surgemail as compromised (old behaviour can be restored with g_web_old_behaviour)
• New: Bounce other messages if first message is mending awaiting friends bounce (g_friends_bounce_second)
• New: Require friend confirmation if email appears to be in language not in list of accepted languages
• New: Continued improvements to the SurgeWeb "Ajax / Web2" web email interface (for more information see surgeweb documentation, surgeweb changes, and known bug list )
• New: User.cgi has a blocklist feature (just like friends but blocks by address) so you can block by address without having to add a zillion filtering rules
• New: Continued improvements to the SurgeWeb "Ajax / Web2" web email interface (for more information see surgeweb documentation, surgeweb changes, and known bug list )
• New: Blogs make use of surgeweb cross browser html editor - old editor / text mode can be enabled per blog in advanced settings
• New: Basic support for IPV6 under windows and linux (beta and requires g_ipv6_enable)
• Fix: High use reports were getting confused by addresses longer than 100 characters (these get truncated in the delivery logs)
• Fix: Thunderbird timeout with large imap folders
• Fix: Tellmail archive search fixes for: g_maildir_netwin, date based archive before first rollover
• Fix: Sporadic crash in archive extract
• Fix: SPF related fix where DNS errors sometimes generated
• Fix: Message attachments sometimes not showing in Thunderbird
• Fix: CR/LF handling when attaching footer files on unix
• Fix: In FF3 the admin interface login resulted in multiple login dialog boxes
• Fix: Editing dlist/lists.dat directly in raw format from admin interface sometimes deleted it completely
• Fix: Responder now works when late forwarding isused
• Fix: Webmail APOP was sporadically crashing webmail
• Fix: Avast for windows would stop messages with very high compression ratio with an error, these are now allowed and logged with a "possible compression bomb" warning
• Fix: Address was being synched when mirrorring config files, address field is now not mirrorred
• Fix: Improvements to the noforgeme handling
• Fix: Bounce handling of surgewall filtering rules
• Fix: Admin login spodarically "froze" due to file lock on users.lst file
• Fix: A number of other minor fixes
• Fix: Trend graphing overflow problem + several fixes to several issues that became apparent as result of first fix
• Fix: Mirroring of settings that don't exist on the master
• Fix: CPU bug if ports were disabled
• Fix: IMAP idle command was not showing new messages under certain conditions for non inbox folders
• Fix: Timezone related "out by one hour" fix for windows 2003
• Fix: Several fixes dlist member removal via web admin interface
• Fix: Several fixes to surgeplus photo sharing
• Fix: Crash when some messages (generally spam) were viewed through user.cgi
• Fix: Archive viewer was missing the last 30 odd characters of messagas
• Fix: Forward / responder was failing to respond and deliver locally in some circumstances
• Fix: Mutex locking problems on multicpu servers
• Fix: Made g_imap_timeout apply to the idle command
• Fix: Dlist memory leak
• Fix: Lockup if authent module doesn't respond nicely to -version request
• Fix: webmail template fix so that the html editor is not displayed for IE8 (the same as has always been done for IE7). The fix is part of this build - the webmail version was upped to 3.1t-12, but the incremented version number did not make it into the build :-(

TFTP Server

Donationware; $12

Current Version: 3.2.1 (September 10, 2007)

TFTP Server is a simple, free utility that helps you to use and configure the TFTP server shipped with the standard Mac OS X distribution. TFTP is a simple protocol used to transfer files, and therefore was named the Trivial File Transfer Protocol, or TFTP. The only thing it can do is read and write files from/to a remote server. It cannot list directories content or change the working directory, and currently has no provisions for user authentication, so a TFTP server must have set a dedicated working directory from which send and receive files.

With this application, you can easily start/stop the TFTP server and change the path where the files are sent and received from TFTP clients (e.g. Cisco routers and switches) which connect to your Mac acting as TFTP server. This is useful if you have a lot of network devices and want to store in a safe place all their configuration text files and operating system binary images. These files can also be reused later (as is or modified using a text editor on your Mac) to easily configure from scratch or update other similar devices.

While there is no information regarding what's new in version 3.2.1, version 3.1 added/changed the following:

• Universal binary.

The NATural

Donationware.

Current Version: 1.0b2 (December 13, 2005)

From The NATural home page: "The NATural is a GUI tool to manage the NAT settings of Mac OS X Server. The NATural allows you to configure many of the settings that Server Admin will pass to natd. Apple's Server Admin software provides only a limited interface to control NAT routing functions. The underlying process, natd, can accept many more arguments. Although Server Admin does not provide an interface to these functions, it does respect all settings that natd supports." The NATural allows you to easily configure the following settings (and many others):

• Default Address
• IP Forwarding
• Port Forwarding
• Logging Options

Version 1.0b2 adds/changes the following:

• No longer asks for password twice on first launch
• Fixed interface menu to read non-physical interfaces
• Added "Other..." option in interface menu
• Fixed several "Error in helper tool response" errors
• Error messages now more specific where possible
• Now asks to apply changes if necessary before starting or restarting NAT
• Port forwarding rules must now include both a target and destination port, this is a restriction imposed by serveradmin
• Punch_fw, custom divert ports, and remote IP/port specifications of port forwarding rules now hidden (ignored by serveradmin)
• Expanded help
• Log drawer performance and memory usage improved
• Better handling of malformed port forwarding and IP forwarding rules

Tomcat

Open source; $0

Current Version: 4.1.40 (June 26, 2009) / 5.5.27 (September 8, 2008) / 6.0.20 (May 29, 2009)

Tomcat is well-known in Unix circles as a preferred Web server (often used in conjunction with Apache) that supports JSP (Java Server Pages) and the running of Java Servlets. Tomcat is actually a Java application itself (and a free one at that), and it runs quite well on the Macintosh.

Tomcat 6.0.x (for Servlet/JSP Spec 2.5/2.1) is the latest major release. Tomcat 6.0 is designed to run on J2SE 5.0 and later. In addition, Tomcat 6.0 uses the Eclipse JDT Java compiler for compiling JSP pages. This means you no longer need to have the complete Java Development Kit (JDK) to run Tomcat, but a Java Runtime Environment (JRE) is sufficient. The Eclipse JDT Java compiler is bundled with the binary Tomcat distributions. Tomcat can also be configured to use the compiler from the JDK to compile JSPs, or any other Java compiler supported by Apache Ant.

Tomcat 5.5.x remains available for Servlet/JSP Spec 2.4/2.0, and it, too, is designed to run on J2SE 5.0 and later. See the online release notes for more details.

Version 4.1.40 (for Servlet/JSP Spec 2.3/1.2) makes a number of changes, which are completely detailed in the online release notes.

Vine Server

Open source; $0

Current Version: 3.1 (June 1, 2009)

Vine Server (also known as OSXvnc) is a native VNC server for OS X that allows you to view and interact with your Mac OS X desktop from another computer over a network. Vine Server is free software and is distributed under the terms of the GNU General Public License.

Vine Server 3.1 includes the following enhancements:

• Added an advanced preference to specify which event source Vine Server should register with (10.4+).
• Added an advanced preference to use OpenGL to capture the display, best on newer Intel hardware (10.4+).
• Moved Keyboard Events selector to Advanced.
• Fixed a problem running on 10.3.9.
• Fixed a problem auto launching the server from GUI when Vine Server was set to Auto-Hide.
• Fixed a problem not honoring the selection to disable Bonjour.
• Fixed a problem with Require SSH not being stored correctly for System Server.
• Fixed a problem with server shutting down after a logout.
• Fixed a number of international keyboards that had a small number of keys not mapped (like i in Belgian, o in Swiss, etc.).
• Fixed an occasional problem sending rich cursors to the remote system.
• Fixed an occasional problem not sending the right information on a copy/cut.
• Fixed a problem with Echoware bundle loaded twice when it wasn't supposed to.

An OS 9 version - called "OS9vnc" - is also available for download.

VPN Tracker

Commercial; see site.

Current Version: Client: 5.4.2 (April 29, 2009) / Server: 1.0.4 (November 1, 2005)

Equinux USA Inc. produces VPN Tracker, a tool for IPsec networking that helps you connect to VPN hardware and software with Mac OS X. The software is available for purchase in both "Professional" and "Personal" editions.

Version 5.4.2 adds/changes the following:

• New documentation and device profiles for DrayTek Vigor2110, Vigor2700, Vigor2710, Vigor2800, Vigor2820, Vigor2910, Vigor2930, Vigor2950, Vigor3100, VigorPro 5300, VigorPro 5500, VigorPro 5510 Series
• New documentation and device profiles for Juniper Networks SSG, NetScreen, and ISG Series
• Added an error message when the VPN gateway is configured to use Aggressive Mode, but VPN Tracker has Main Mode configured
• Added a workaround for some ZyWALL devices that prematurely switch network ports when performing NAT-Traversal
• Fixed local identifier type for SonicOS Standard device profiles
• Added a warning message when exporting a connection that requires a Professional Edition license to work
• Added a warning message when importing a connection into Personal or Player Edition if the connection uses features that are available only in VPN Tracker Professional Edition
• Fixed an issue with storing XAUTH credentials with some rare VPN gateway configurations that send the XAUTH request in two parts

The demo mode is equivalent to the licensed Professional Edition, so some of the features (such as high-level encryption) will not be available in the Personal edition. A complete comparison of both editions is available. The demo is valid for 30 days, and connections will time out after 3 minutes.

VPN Tracker Server is also available, allowing remote access for external users; home or branch offices are able to connect securely to the office using VPN Tracker Client.

Web Crossing

Commercial; see text.

Current Version: 5.0 (Updated regularly)

Web Crossing, Inc. produces Web Crossing, a high-end, high performance news/chat/discussion server system that runs on many platforms, including Mac OS and Mac OS X. Web Crossing may be extended via a host of plugins that provide a great variety of additional functionality, from blogs to wikis, and beyond. Features include:

• Message boards
• Chat & live events
• Mailing lists
• Polls
• RSS Feeds
• Blogs
• Wiki
• Calendars
• Access controls (private areas)
• Scripting
• Notification of new content
• Complete web service, FTP and email functionality
• Localization
• Scales to serve massive communities

Web Crossing also produces bundled solution suites (groups of plugins forming a complete, integrated package) that provide the Web Crossing product in special configurations for three select environments:

• WebCrossing Core - WebCrossing Core includes fully-functional internet protocols: multi-domain web server, newsgroup server, email server, chat server, XML-RPC server, FTP server, and more. Use it out of the box, or use it to build your own web application.
• WebCrossing Community - WebCrossing Community provides a preconfigured collection of the most popular online community tools including message boards and chat.
• WebCrossing Neighbors - WebCrossing Neighbors extends WebCrossing Core to provide your organization, company, school, clients - any group of people with common interests - with your own private-branded social network that includes personal spaces.

Pricing depends upon the combination of users, page views, and features that you choose. See the official pricing page for more information.

WeirdX

Current Version: 1.0.32 (April 27, 2004)

WeirdX is a Java-based, open source X Window server that happens to run successfully under Mac OS and Mac OS X. While I don't generally list Java applications on the Orchard (they're a different breed entirely, and many fine sites track Java-based software), when the program in question provides a service that Mac users find themselves wanting, I happily make an exception. Free X server software is such a beast; MI/X is good but it hasn't been updated since 1998, and XFree86 only runs on Mac OS X. Commercial alternatives exist, to be sure, but for many Mac users who need only occasional access, the pricing of these products makes them impractical. WeirdX is free (and distributed under the GNU GPL) and has a bunch of truly nice features:

• WeirdX handles X protocols directly.
• WeirdX is implemented with JDK 1.1.
• WeirdX runs as an application/applet.
• WeirdX supports Rootless mode.
• WeirdX runs as a TrueType font X Server if your JVM supports TrueType fonts.
• WeirdX supports the three mouse button emulation.
• WeirdX supports copy/paste operations between the native window system and x clients via CUT_BUFFER0.
• WeirdX supports 1bpp, 8bpp and 16bpp mode.
• WeirdX supports multibyte characters; Japanese, Korean and Chinese characters.
• JRexec is included.
• WeirdX supports XDMCP.
• WeirdX supports dxpc(Differential X Protocol Compressor) with the assistance of JDxpc.
• WeirdX includes hacks for the alpha transparency.
• WeirdX supports EsounD compatible applications.
• WeirdX includes the XJS Extension written by Christian Werner.

Version 1.0.32 adds/changes the following:

• added the secure X access support by using JSch.
• fixed a crash bug in setting the title of window frame in RootlessWM mode.
• fixed crash bugs in handling window properties.
• fixed bugs in displaying Japanese characters on recent J2SE's VM.

WeirdX supports core protocols of X11R6.3 partially, and I haven't been able to fully test it just yet. WeirdX will not be suitable to execute "heavy" X clients, but you may find that twm, xterm, etc. will run fine on it. The WeirdX home page has links to ready-to-run (double-clickable) applications for Mac OS and Mac OS X, but they may be a release or two behind the current version; if you really want the latest release, you'll have to work a bit harder. If you're running "Classic" Mac OS (i.e., not Mac OS X), begin by downloading the following files:

1. Mac OS Runtime for Java (otherwise known as "MRJ" and available on the Orchard's Helper apps page) - only if you don't already have it.
2. Apple's free MRJ Software Development Kit.
3. The WeirdX Java archive.

Once you have the two Apple MRJ products installed, you'll need to:

1. Place the weirdx-1.0.32.jar file into the place where you want it to reside permanently.
2. Drag weirdx-1.0.32.jar onto the JBindery application (located in the MRJ SDK folder under Tools | Application Builders | JBindery).
3. Enter "com.jcraft.weirdx.WeirdX" in the Class name: field, then click on the Classpath icon to make sure that the weirdx-1.0.32.jar file is in the class path.
4. Finally, using the File menu select Save As... to give it a name and save it as an application. That's it!

(Mac OS X users have it much easier: download the WeirdX Java archive, open up a terminal window, navigate to the directory where the .jar file resides, and type "java -jar weirdx-1.0.32.jar".). Paul Schaap has provided an unofficial installer for the uninitiated (1.0.31).

By the way: you'll never have to do this again; now, you'll be able to double-click on the applet whenever you want to use WeirdX. Once you have this ready, you'll need to have access to a machine that has X client applications available for running, and you'll need to use the "export" or "setenv" commands to tell this machine to use your Mac as the X Server (talk to your local sysadmin for more info.)

X11 for Mac OS X

Freeware

Current Version: 1.0 (October 28, 2003) / 1.1.3 (November 14, 2006) / 2.1.6 (May 12, 2009)

X11 for Mac OS X - from Apple itself - offers a complete X Window System implementation for running X11-based applications on Mac OS X 10.3 Panther (users of prior versions of Mac OS X should use XFree86, and Tiger users have the latest version on their installer DVDs). Based on the de facto-standard for X11, the open source XFree86 project, X11 for Mac OS X is compatible, fast and fully integrated with Mac OS X. It includes the full X11R6.6 technology, including a window server, libraries and basic utilities such as xterm.

X11 for Mac OS X takes advantage of the Mac OS X Quartz graphics system to deliver hardware-accelerated 2D and 3D graphics. Quartz provides snappy scrolling speeds for text, live drag and resize of windows, as well as 3D animation through OpenGL Direct Rendering. X11 for Mac OS X combines the display and client libraries into a single download and install, so getting X11 running on Mac OS X is easy. The installer sets up your environment with your path and DISPLAY. It also makes it simple to start xterm sessions and other popular X11 utilities. Additionally, you can use any three-button USB mouse with X11 for Mac OS X.

Version 1.0 - the latest version for Mac OS X 10.3 - adds/changes the following:

• GM v1.0: Panther compatible and included as an optional install on Mac OS X v10.3 Panther CDs.
• Bundled: Optional install from the third Mac OS X v10.3 Panther CD.
• XFree86 4.3: Includes latest enhancements from the Open Source community.
• Full Screen Mode: Show X11 root and application windows on their own screens
• X11 Dock Menu: Activate X11 applications or windows directly from the Dock icon.
• Double-click applications: Launch X11 applications in the Finder
• Application Menu Command Keys: Define keystrokes for launching X11 applications.

Version 1.1.3 - the latest version for Mac OS X 10.4 - adds/changes the following:

• This update addresses several issues in the X11 for Mac OS X package, enabling it to better handle GLX stereo visuals and offscreen rendering to GLX Pbuffers and Pixmaps.
• To tell X11 to take advantage of stereo visuals, enter $ defaults write com.apple.x11 enable_stereo -bool true
• Also addresses font issues present in X11 1.1.2

Version 2.1.6 - the latest version for Mac OS X 10.5, and available only as part of the Mac OS X 10.5.7 update (and which reports itself as version 2.0 in the Finder) - makes unspecified changes.

XAMPP

Current Version: 1.0.1 (April 14, 2009)

The "client" version of Mac OS X comes with a variety of perfectly capable open source languages, servers and utilities (such as Apache, Perl, Ruby, etc.) that comprise a comprehensive web-serving package. However, many of the versions Apple has chosen to include with "plain vanilla" Mac OS X (as opposed to Mac OS X Server) are a few versions behind the most current offerings. This makes for a stable, functional, yet somehow conservative collection of services that are missing some "bleeding edge" features that more seasoned users may have come to expect. While it's quite possible to download and use these more recent versions on your own (compilation sometimes required), it can be difficult - if not maddening - to try to keep tabs on the latest releases of all these pieces of software. Enter XAMPP, a free package from Apache Friends, which is a non-profit project to promote the Apache web server, founded in the spring of 2002 by Kai 'Oswald' Seidler and Kay Vogelgesang.

XAMPP is an easy-to-install Apache distribution containing a more recent version of the Apache web server, along with more recent versions of supporting applications such as MySQL, PHP, Perl, and more. XAMPP is really very easy to install and to use - just download, extract and start. It comes as a Mac OS X Installer package which contains all the necessary files and requires no dependencies.

XAMPP version 1.0.1 for Mac OS X contains the following software: Apache 2.2.11, MySQL 5.1.33, PHP 5.2.9, Perl 5.10.0, ProFTPD 1.3.2, phpMyAdmin 3.1.3.1, OpenSSL 0.9.8k, GD 2.0.35, Freetype 2.3.5, libjpeg 6b, libpng 1.2.32, libungif-4.1.4, zlib 1.2.3, expat 2.0.1, Ming 0.3.0, Webalizer 2.01-10, pdf class 009e, mod_perl 2.0.4, SQLite 3.6.3, phpSQLiteAdmin 0.2, gdbm-1.8.3, libxml-2.7.2, libxslt-1.1.24, openldap-2.3.43, imap-2004g, gettext-0.16.1, libmcrypt-2.5.8, mhash-0.9.9, zziplib-0.13.48, bzip2-1.0.5, freetds-0.64.

Please see the online installation guide before downloading.

XFree86

Open source; $0

Current Version: 4.8.0 (December 19, 2008)

XFree86 is a freely redistributable open-source implementation of the X Window System that runs on UNIX(R) and UNIX-like (like Linux, the BSDs, Mac OS X (aka Darwin) and Solaris x86 series) operating systems and OS/2. XFree86 is the underlying software that is between the hardware and graphical user interface (aka gui) that people see and use. If you are using KDE, GNOME, Enlightenment, Blackbox, AfterStep, twm or fvwm then you are already using and running XFree86 as these run as XFree86 clients.

Although Apple includes XFree86 in a special, optimized form in Mac OS X (see X11 for Mac OS X, above, for more information), this version is a little more on the "bleeding edge" and may be used on earlier Mac OS X releases as well.

The version 4.8.0 release includes the XDarwin application. Previous versions of the XDarwin application (up to v1.0.6) were available from the "XonX" site as updates to XFree86 4.1. With this addition, you can run both X Window and Aqua simultaneously - a very nice benefit. X Window on OS X has grown out of infancy into early adulthood, and that's a good thing indeed. (Thanks to Adrian Umpleby for clarifications to these descriptions.)

Xtools

Commercial; $199

Current Version: 1.2 (March 9, 2003)

Tenon Intersystems the Xtools X Window server package for Mac OS X. From the Xtools web site: "Xtools is a new, built-from-the-ground-up, object-oriented, multi-threaded Cocoa application that takes full advantage of CoreGraphics and Quartz. Xtools is optimized for the velocity engine and multiple processors and supports hardware accelerated OpenGL. Xtools is not only a vehicle for displaying remote X11 client applications, but also for developing local X11 clients. The Xtools X11 libraries let developers build clickable X applications that can be minimized in the Dock. Xtools is based on open source industry standards and is tightly integrated with Mac OS X and Apple technologies."

Zeus Web Server

Commercial; $1,699

Current Version: 4.3r4 (July 30, 2007)

Zeus Technology Ltd. produces Zeus Web Server, a scalable, ultra-high-performance (used by eBay and several other high-traffic sites) UNIX-based Web Server that now runs on Mac OS X.

ZWS 4.3r4 is a minor revision of ZWS 4.3r3, containing a number of bug fixes. Customers are recommended to upgrade as soon as possible. Changes include:

• The Bandwidth Throttling maximum number of simultaneous requests limit now applies across all ZWS processes. Previously each ZWS process applied the limit separately.
• Fix a bug where the 'connections.open' SNMP counter could return incorrect, negative values.
• The "Options" directive in the htaccess support now supports the '+' and '-' notation.
• Prevent a crash when multiple virtual servers share the same SSL certificate.
• Fix a problem where viewing the Current Connections page while SSI requests were being handled could cause a crash.
• X509 Certificate Signing Requests now use the SHA-1 hash algorithm and include the 'attributes' section (required by some certificate authorities).
• Ensure that variables set using a FastCGI authorizer appear in the environment for Java Servlets.
• Improve Perl Extension handling of connections closed early.
• Improve FreeBSD 6 kqueue support.
• PHP has been upgraded to version 4.4.7.
• Ensure 'start on boot' works correctly in Solaris 10 and the newest Ubuntu Linux releases.

Note: From 10th June 2008, Zeus will no longer support Zeus Web Server (ZWS) on several platforms, including Mac OS X. For more details, see the end-of-life announcement page.