Panta Rhei Remailer Web Page - Part II


Part II







Window|Explore

This is Jack B. Nymble's main window from which various tasks may be launched, and files may be maintained. Although JBN allows you to use any folder for storing your files, the suggested folder for Message Books and Templates is C:\JBN2\Books, and the suggested folder for Nym Books and their associated files is C:\JBN2\Books\Nyms

To open a file, click on the folder and then double-click on the file to open. You may open any kind of file from within JBN, and you can move and copy files to other folders by dragging them or by using the Files|Selected menu (also available by right-clicking on the file list).

Using the keyboard, any file or folder may be opened by entering its name and pressing Enter. HTTP URLs may also be entered in this box, and will be opened in the Stats Browser. The drop-down list stores recently opened filenames and folder names for quick access.

The Open Window button is used to indicate that you want a book opened in a new window. When you double-click on a book, JBN will load the book into any available book window. If you select the file and press Open Window, the book will be opened in a new window. The Open Window button may also be used to open the current folder in Windows Explorer. Click on the folder, or enter its name, then click Open Window.

The drop-down pattern list above each list of files allows you to choose which file types are listed. If View|Double List is checked, two file lists are displayed, and each may display a different type of file. As you become accustomed to using JBN, you will understand why two file lists of the same folder are useful. In the Books folder, Templates may be in one list and Message Books in another. In the Nyms folder, Nym Books may be in one list, and their resulting Message Books in another. The list file patterns may be customized by choosing View|Edit Patterns.

The log box at the bottom of the window displays task completion and error messages. If you leave JBN unattended for a period of time, you can check what activity took place in your absence. The log box may be expanded to full size by selecting the Log tab at the top of the window, or by double-clicking in the log window. If unattended errors have occurred, a red error icon will appear in the corner of the log. Clicking this icon will show just the errors which have occurred. Right-clicking the icon will clear the icon without displaying the errors.

Other important items in the Explore window:

    File|Selected Files
    This menu, also available by right-clicking in the file panes, allows you to move, copy, delete, wipe, and rename files. Use the Copy Files or Cut Files option to copy selected filenames to the copy buffer. Then move to a destination folder, and select Paste Files.

    Tools|Check Email/Get News
    Select these items to initiate retrieval from all enabled profiles. If a send or other net function is in progress, retrieval will not begin until it has completed. Tip: Click on the status bar at the bottom of the main JBN window or the View Mail window to initiate retrieval.

    Tools|Abort Connection
    Select this item from any JBN window by pressing F8. Any current net functions will terminate. They will not automatically restart for one minute.

    Tools|Disable Auto Functions
    If checked, JBN will not initiate automatic (timed) mail or news retrieval, sending, or stats downloading. Use this option to temporarily disable automatic net functions. (Functions already in progress are unaffected.)

    Options|Pop-up Messages
    Check or uncheck these items to indicate which types of pop-up messages you wish to receive. For example, when a mail sending error occurs, JBN will write the error to the log box. Also, if Pop-up Messages|Queue is checked, it will display a pop-up message to inform you of the error.

    Options|Verify Connection
    If checked, JBN will check to see if you are connected to the net before attempting any net access, such as sending and retrieving mail, or refreshing stats. If unchecked, JBN will make the attempt even if you appear to be offline. In most cases this option should be checked. Uncheck this option only if JBN fails to correctly determine when you are online.

    Options|Dial When Needed; Hang Up Automatically
    These options allow you to quickly disable and enable the Dialer configured in Window|Global Config|Dialer. You can also manually dial and hang up using the Tools menu.



Window|Queue

When a mail message is created from a Message Book, it is sent to JBN's centralized mail queue. When the message is read into the queue, it is given a random Schedule send time, based on when it was created plus a value in the Add random latency range specified. (For example, 2:00 to 5:30.) Dummy messages are given a Schedule time which sends them within one hour from the current time.

If Add random latency is checked, JBN will not send messages until their Schedule time and date. If Add random latency is not checked, JBN will send all messages, regardless of Schedule time.

If Send in random order is unchecked, JBN will send messages according to their Created time and date (or their Schedule time and date, if Add random latency is checked). If Send in random order is checked, pending messages (which must be older than their Schedule time if Add random latency is checked) will be sent in random order. (If messages are queued using several Send Profiles, JBN will group the sending so that it only needs to connect to each SMTP server once.)

To reschedule queued messages based on a new latent time, enter the new latent time, then select Que|Refresh. (This menu is also available by right-clicking on the mail list pane.)

Each message is sent via its Send Profile. To change the profile of a message, right-click on the profile name and select change profile.

To delete one or more messages from the queue, select the messages (hold down the Ctrl key and click on each message), then select Delete from the Que menu. To delete all currently displayed messages in the queue, select Clear Que.

If you want a particular message or group of messages to be given immediate priority for sending, select the messages and select Give Priority. These messages will be sent before other messages, and will not obey their Schedule time. To cancel the priority, select Que|Refresh.

To view a message in the queue, select the message and select Que|View Message.

Press the Send button in to enable sending of mail. Keep this button out to hold messages in the queue.

To stop sending, press the Send button out and wait for the current message to finish sending, or press Abort to stop sending immediately.

Note: Messages queued for sending via disabled or non-existent profiles will not be sent.

IMPORTANT: If you queue messages to be sent via a particular Send Profile, and then change the name of that profile, the queued messages will not be sent until you change their profiles to a current, enabled Send Profile.

Dummy messages are generated and queued if a send profile has the Generate dummies option(s) checked. JBN2 will not generate dummy messages until all queued dummy messages have been sent. (This prevents large numbers of dummy messages from backing up when you are offline.) When dummy messages are read into the queue, they are scheduled for sending within one hour of the current time, regardless of when they were created. After one hour has elapsed, and if no dummy messages remain in the queue, more dummy messages may be generated.

JBN2 will generate a maximum of two Cypherpunk and two Mixmaster messages per hour. Dummy messages follow a chain of AUTO remailers, and are discarded by the final remailer. You may preview dummy message creation by checking Que|Preview Dummies.



Window|Log

JBN's Log is used to record successful net functions, such as sending and retrieving mail and refreshing stats, and to record errors and problems which occur.



Window|View Mail

The View Mail window is used to display retrieved email and news messages, and includes additional features to facilitate the use of nym accounts.

JBN stores mail in subfolders located in the Mail Folder (set in Window|Retrieval Config|Mail Folder). The Inbox subfolder is the default location for incoming mail, and is the folder automatically opened when the View Mail window loads.

The Mail List
All files in the open folder are displayed in the mail list. Mail messages are stored in UNIX Message File Format, and have the extension ML0 or ML1. Text files with the extension TXT may also be opened and edited in the View Mail window. Other files will be opened according to the default Windows association for that file.

Messages are listed by Subject, Sender, Sent, Recd, and K. Subject is the Subject header of the message. (If the item is a file, the filename is shown.) Sender is the name in the From header (or the destination address of a sent message). Sent shows the date and time the message was sent by the sender (according to the message's Date header), in local time. Recd shows when the message was retrieved or decrypted, whichever is later. (The format used to display the dates may be configured in Window|Retrieval Config|Options|Date Display Format.) K shows the length of the message in kilobytes.

To sort the mail list, click on a column header. The message will be sorted by that column in ascending order (+). To sort in descending order (-), click the column header a second time.

To resize or hide columns, drag the divider bars between the column headers.

Displaying a Message
To open a message, click on its icon or Subject in the mail list. (If the item is a file, it will be opened in another window.)

Each message may contain up to two parts: the original message and the decrypted message. A plain message or a message which has not been decrypted will have only one part, which will be displayed on the Original tab. The Decrypted tab will be empty, indicating that this message has not been decrypted. Click the Decrypt Now button to decrypt the message. (Note: The Decrypt Now button is not available if the message is already queued for decryption.) JBN can decrypt a message successfully only if the correct passphrases are in the Nym Accounts Registry.

If a message has been decrypted, the decrypted message will be displayed on the Decrypted tab. To see the original undecrypted message, select the Original tab. If the Original tab is blank, this means that the original message is not available (it has been deleted, or the message was decrypted from the clipboard). To decrypt a message again, select the message, right click on the mail list and select Decrypt.

Above the text is a label showing what kind of message you are viewing (eg Plain Message, News Article, Decrypted Message, Reply-Block Message). If a Reply-Block message, the reply-block number (from the Nym book) is shown. The number of conventional decryptions the message underwent is also displayed [n Conv], which is useful for verifying that all ek remailers in your reply-block are encrypting the message en route as expected. If the reply-block was private-key decrypted, "[PK]" will appear.

Tip: Double-clicking in the text box is the same as selecting View|Full Text.

The Headers checkbox above the text determines how the message's headers are displayed. If unchecked, only some headers are displayed (From, Subject, Date, To, CC, Newsgroups). If checked, all headers of the message are shown. In the case of Reply-Block messages, note that several headers are added to the top to indicate the validity of the nym-server signature. In the case of copies of sent messages, headers are added to indicate what remailers were used and what attachments were included.

If the Raw checkbox is checked, the entire message is displayed as plain text with no MIME or UUE decoding. When Raw is checked, the displayed message may be edited and saved to correct formatting problems, etc.

To reply to a displayed message, select a template from the Reply Via drop-down list (Configured in Window|Retrieval Config|Reply Templates Folder). To follow-up a news article, click once on the text label "Reply Via". The label will change to "Follow-up Via". Now select a template. Follow-up Via works similarly to Reply Via except that any To address in the template is preserved. This is useful for presetting a mail2news gateway address or a mailing list address in the template.

When viewing a sent message (archived using the Message Archive facility of the Message Book window), if the book was archived, you may press the Open Book button (upper right corner) to open the associated book file, to resend or replay the message.

Click on the Info tab to display statistics about the message, including the original and decrypted filenames, and any reply-block associated with the message.

Press the Trash button (or press Ctrl-Insert) to move the message to the Trash folder. (JBN does not use the Windows recycle bin.) Press the Delete button (a red triangle with exclamation point) (or press Ctrl-Delete) to delete the message. Note: If more than one message is selected in the mail list, all the selected messages will be trashed/deleted.

Press the left or right arrow button to display the previous or next message in the list.

Attachments
If a message includes attachments in a format recognized by JBN (most MIME and UUE formats), an Attachment tab will be available when the message is displayed. This tab will contain a list of attachments included in the message. Select an attachment and press Save As (or double click on the attachment list) to save the attachment. Use Save and Open As to both save the attachment and open it using the Windows application associated with the file's type. (See virus warning below)

ATTACHMENT VIRUS WARNING
Any EXE or COM file, and other application-specific files and macro documents may contain a virus or a trojan horse. A virus may be configured to be sent to your nym account with the intent of determining your identity, passphrases, or other information, and transmitting, posting, or emailing them.

Even if a message's headers appear to be from a sender you trust, it may have been intercepted and altered en route. Do not trust any attachment which is not PGP signed by the sender and which you have not verified the PGP signature of manually using PGP directly. Even so, you still may incur a risk if the sender was unaware that the file was infected. Keep in mind that virus detection programs do not detect all types of viruses.

In general, unless you have manually verified the attachment signature and trust the sender, do not open or save the attachment. (Merely saving the attachment is not a risk as long as you save it to a non-system, non-program folder, except that you or another user may unknowingly run it later.)


Multi-Part Messages
Messages identified as MIME multi-part messages, after retrieval or after decryption, are automatically moved to the Multi folder pending assembly. This includes multi-part nym "fixedsize" messages. (If your nym account has fixedsize enabled, messages larger than 10K are sent in pieces which must be decrypted, assembled, and decrypted again.) After all parts are received and decrypted, JBN will assemble and if necessary decrypt the assembled message. The original and decrypted assembled message will be placed in the Inbox folder, or in other folders depending on reply-block Decryption Folder, Anti-SPAM filters, or Trash Nym Duplicates setting. The MIME parts will then be moved to the Trash\Multi folder. When you empty the trash, they are deleted. (To assemble parts in this folder again, select the messages and decrypt them.)

Non-MIME multi-part messages are not placed in Multi and are not automatically assembled by JBN. To assemble these types of messages, you need to piece the parts together manually. Check Raw, then load each message part in order, copy it to the clipboard, and paste it into a final message. Save the final message and decrypt it if necessary. Another alternative is to export the messages to a client which assembles these types of messages, such as Agent.

Text Files
Text files and email messages (if Raw is checked) may be created, edited, and saved in the View Mail window. If the text file has the extension TXT, it can be loaded by clicking on its name in the mail list. Otherwise use File|Load Text File.


Other Important Features of the View Mail Window

    Drag and Drop
    Messages may be selected and dragged to other folders. To copy messages to another folder, select the messages, hold down the Control key, and drag them to the folder.

    File|Selected Messages
    This menu allows you to perform several functions on all selected messages. Select one or more messages then choose this menu. This menu may also be invoked by right clicking on the mail list.

    To decrypt a batch of messages, select the messages and choose Decrypt. If the message(s) have already been decrypted, the decrypted portion will be deleted, and the messages will be queued for decryption.

    Select Save As... to save one or more messages to a UNIX Message File. (This format may be imported by many email apps, such as Agent, Netscape, and Eudora.) Use Append As to add the messages to an already existing UNIX Message File.

    The Delete functions operate as follows:

      Delete deletes both the original and decrypted part of the selected message(s). (Same as pressing the Delete button.)

      Delete Original deletes only the original part of the message(s), and leaves the decrypted portion. Original messages which have not been decrypted are not deleted. This function allows you to free up disk space by deleting message parts which have already been decrypted, without deleting plain messages or messages which have not yet been decrypted.

      If archived Sent messages are selected, any book or replay files archived with the message will be deleted by Delete Original.

      Delete Decrypted deletes only the decrypted part of the message(s), and leaves the original, if any. As long as the original remains and the passphrases are available in the Nym Accounts Registry, the message can be decrypted again.

      Wipe, Wipe Original, and Wipe Decrypted work similarly, except that the files are wiped instead of deleted. For greater security move your entire Mail Folder to an encrypted drive.


    The Mark Read and Mark Unread items allow you to set the read status of selected messages. Unread messages appear with a red icon and cause a red flag to appear in the folder list.

    File|Import Messages
    This item is used to import one or more messages from a UNIX Message File, such as that produced by JBN and Agent. Some success may also be had importing mail from Netscape, Eudora, and other applications which use a similar format.

    File|Empty Trash
    All files will be removed from the Trash, Trash\Multi, and Trash\Spam subfolders.

    Edit|Find/Find In Messages
    In addition to the Find function which searches the current message text, the Find In Messages function searches all messages in the current folder for the text you specify.

    Note that when searching messages, JBN first searches the raw message. It will then load and display the message momentarily if the text is found. If you do not have Raw checked, and the search text was only visible in the Raw view, it will move on. This allows you to control whether your search applies to the raw or displayed message by setting Raw appropriately before searching.

    If a message has both Original and Decrypted parts, only the decrypted portion (indexed in the mail list) is searched.

    Tools|Decrypt
    Select Clipboard to decrypt the message or text currently on the clipboard. The result will appear in the Inbox folder as a new message.

    Select File to decrypt one or more messages in a file. If the file contains more than one PGP message, JBN will take just the PGP messages and decrypt each as a separate message. This allows you to decrypt UNIX Message Files containing one or more messages exported by Agent, for example. In most cases you can also decrypt all the messages in Netscape, Eudora, Pegasus, and Outlook Express mail folders using this function. (These programs' mail folders are actually files. JBN will scan them and extract the PGP messages.)

    Select Selected Messages to decrypt messages. If the message has already been decrypted, the decrypted part will be deleted and it will be decrypted again.

    Select Cancel to clear the decryption queue.

    Enabling Diagnostic Mode will cause JBN to display each intermediate stage during decryption. This is useful for tracking down decryption problems. If using PGP 2.6.x, you may wish to set Window|Global Config|DOS Mode to Window Paused for additional detail.



Window|Stats Browser

Jack B. Nymble's Stats Browser is used to download and view remailer reliability statistics pages and keys, view JBN's User's Manual and Remailer Reference, and may also be used as a basic web browser.

Reliability stats and keys URLs are configured in Window|Stats Config. To refresh stats from within the Stats Browser, select Tools|Refresh Stats. JBN downloads the stats, using secondary URLs if the primary URLs fail, then creates and displays a small web page which contains all stats links and the current active stats.

This Stats page may also be bookmarked in your other web browsers. It is normally located in C:\JBN2\Stats\Stats.htm, or wherever you installed JBN, and is updated every time stats are refreshed in JBN. In addition, the active CPunk stats are written to CPunk.htm (or CPunk.txt) and Mix.htm (or Mix.txt).

In addition to refreshing stats, if Window|Stats Config|Options|Refresh capability strings is checked, your remailer capability strings, listed in Window|Remailers Config|Capabilities will be updated with new or changed strings.

To update your Cypherpunk remailer keys, select Tools|Get CPunk keys. JBN will download the URLs you select and send them to PGP, where they will be added to your keyring.

To update your Mixmaster keys and the list of available Mixmaster remailers (type2.lis and pubring.mix), select Tools|Get Mix Keys. You may wish to only download Mix keys from the most up-to-date source, or older versions of keys may be added to your keyring.


To download other web pages, enter the URL in the URL field and press Enter, or select a page from the drop-down list (configured in Window|Stats Config [F7]). Valid URLs in the Stats Browser include HTTP URLs (with port optional), local disk files, or finger addresses. All of the following are valid URLs in the Stats Browser:

    http://echo.znet.de:8888/
    
    c:\JBN2\Stats\Stats.htm
    
    finger: rlist@anon.efga.org
    rlist@anon.efga.org
    rlist@anon.efga.org@anon.lcs.mit.edu
When entering an HTTP URL which is a directory and not a file (such as http://www.panta-rhei.dyndns.org/) a trailing slash is recommended to speed access.

The Stats Browser can be used to download most basic web pages. It does not support Java, Javascript, cookies, and some types of forms. This limitation can be used beneficially if you are concerned about a web page with possible viruses or other malicious code. It is highly unlikely (virtually impossible) that such a page could adversely affect your system when downloaded in JBN's Stats Browser, as it does not support the functions required for such viruses and macros.

The Stats Browser also does not write any information to your Windows registry, and does not store URLs you visit between sessions. All bookmarks are stored in your JBN configuration file, which may be encrypted with Secure Mode. Retrieved pages are temporarily stored in the cache folder, configured in Window|Stats Config. ALL files are deleted from this folder when the Stats browser window is closed. You may specify this folder be located on a RAM drive or an encrypted drive for improved security. (Be sure the cache folder has ample space for the pages and images you will be downloading, or data may be written to the Windows TEMP folder.)

In addition HTTP proxies may be configured for use with the Stats Browser in Window|Stats Config. After you have set the proxy URL(s), select Options|Proxy Visits Via A or B to indicate which proxy is to be used. (Only one proxy is used at a time.) When the proxy is active, the URL field label will be red.

HTTP retrieval of stats may also be proxied (although this is generally not particularly helpful) in Options. Finger retrieval is not proxied, but may be chained.

IMPORTANT: Please test the Stats Browser thoroughly with the proxy you plan to use before relying upon it for security. Pascal's Header Echo, among other similar resources, is recommended: http://echo.znet.de:8888/


Image loading may be disabled by unchecking Options|Auto-Load Images. Images are not loaded for stats and key retrieval access.

Redirection, which means a URL is forwarded to another URL, may also be disabled in Options. If disabled, you will be shown an Object Moved page indicating the forward link.


Display Note: The Stats Browser won't display single forward slashes (\) as they appear on most web pages. For the slash to be visible the page must use a \ character code.



Window|Global Config

Program

Required global settings pertaining to general program operation.

    Global Work Folder
    The folder where temporary files should be written. This should be a very short-named directory. C:\TMP is recommended. For greater security use a RAM drive or an encrypted drive.

    Mail Queue Folder
    The folder where outgoing mail messages will be stored before they are sent. If you change this folder while mail is queued, be sure to move all mail files from the old folder to the new folder, and select Que|Refresh.

    Wipe Files With
    The command line used to wipe sensitive temporary files. zapfile /9 is recommended.

    DOS Mode
    This setting determines how DOS programs, such as PGP 2.6 and Mixmaster 2, are run from within JBN.

      Hide (the recommended setting) runs the DOS program in the background, with no window or taskbar icon.

      Window Paused opens a DOS window, and waits for the user to press Enter when the task has completed. This setting is primarily for diagnostic purposes.

      Min with Focus open a DOS session as a minimized icon in the taskbar which is given the Windows focus. The focus will improve the speed at which the DOS program runs, but may be inconvenient if you're using several applications at once, because JBN will take the focus whenever a DOS session runs. When running in this mode, you may click on the minimized icon to open the DOS window.

      Min without Focus open a DOS session as an unfocused, minimized icon in the taskbar. This provides greater running speed than Hide mode.

    Preferred Font Size
    The font size used in many of JBN's windows.

    Preferred Language
    The language in which pop-up messages and help files appear. [Beta Note: Currently, only pop-up messages and help files are affected.]

    Secure Mode
    Enables automatic conventional IDEA PGP encryption of your configuration data. [More Information]


PGP

Settings pertaining to your required PGP installation.

    PGP Version
    Indicate what version of PGP JBN should interface with. You may have both versions installed and switch between them by changing this setting. Note: If using PGP 5.5.3 or 6, you must use a version which supports encryption with RSA keys. [PGP Installation Instructions]

    Preferred Algorithm
    Some remailers provide the newer DSA (Diffie-Hellman or DH, ElGamal) keys, in addition to RSA keys. If both keys are present on your keyring, which do you prefer be used for encryption of messages? (This setting is only available if you are using PGP 5 or 6.

    Version Report
    This setting may be used to add a false Version line to most PGP messages produced by JBN, in order to improve anonymity, or make it unclear where you are located. It is recommended that you leave this setting blank, in which case a random Version line is used.

    If Version Report is left blank, clearsigned messages are always reported as "Version: N/A" (they are not assigned random Version lines).


Dialer

Optional settings affecting JBN's automated dialer.

    Connection
    Select the Windows connection you wish JBN to use for dialing. You must configure this connection in My Computer|Dialup Networking.

    Username
    The username used to login to the connection.

    Password
    Your login password.

    Dial when needed every n minutes
    If checked, JBN will establish a dialup connection when needed for sending and retrieving mail. It will wait the specified number of minutes before dialing again. JBN will not dial in just for Stats Refresh, unless you initiate it. Note: If you are using the Windows dialer and you are disconnected, JBN will attempt to press the Reconnect button to reestablish the connection in lieu of dialing. JBN cannot dial when the Windows dialer is open.

    Hang up automatically
    If checked, JBN will terminate the dialup connection when it has completed all required net functions. JBN will only terminate connections which it initiated. To hang up connections initiated by another dialer, select Tools|Hang Up. If unchecked, JBN may establish a dial up connection but will never hang up automatically.

    Start the following apps on connect
    A list of applications or documents to be opened each time JBN establishes a dialup connection, such as a browser. This insures that the dial up connection has been established before the apps are started. List one command line per line. Shortcuts are acceptable.



Window|Retrieval Config

Options

Mail and news retrieval and decryption settings.

    Mail Folder
    The folder containing your mail subfolders. C:\JBN2\Mail is the default location. For greater security, move your mail folder to an encrypted drive.

    Reply Templates Folder (Your books folder)
    The main location where you store your TBK template files. C:\JBN2\Books is the default location. This setting is used solely by the View Mail window to set the Reply Via list of templates.

    Date Display Format
    How are Dates in the mail list of the View Mail window to be displayed? Choose a setting from the drop down list or enter a custom setting.

    Filter News Duplicates
    If checked, JBN will not save the same message twice from different servers. This feature allows you to scan multiple news servers for your messages to insure you receive all of them.

    Trash Nym Duplicates
    If checked, if you receive the same nym message more than once (through multiple reply-blocks), the duplicate messages will be moved to Trash\Duplicates after decryption. This overrides the reply-block's Decryption Folder, if set.

    When you select Window|View Mail|Empty Trash, the duplicate messages are deleted.

    Nym confirmation messages are not moved to Duplicates. Your nym account must have +cryptrecv enabled for this function to work properly.

    Update AckSend.TXT
    If your nym account has +acksend enabled, it sends you an acknowledgement of each email sent from your account. If Update AckSend.TXT is checked, JBN will detect these messages and will add the information in each to the file "AckSend.TXT", located in your Inbox folder. When you need to verify that a message was sent (or failed), instead of storing and searching through many acknowledgement messages, you can consult and search the AckSend.TXT file.

    Note that the AckSend.TXT file will continue to grow without limit, and should be trimmed periodically. To trim it, open it in the View Mail window, remove the top portion, and select File|Save Message As. Or, just trash the file.

    If you use the Update AckSend.TXT feature, you may want to have JBN discard the acknowledgement replies automatically. To do so, set an accurate Anti-SPAM filter. (See below.)

    Decrypt new messages
    If checked, after mail and news messages are retrieved and saved, they will be decrypted automatically. If unchecked, decryption must be initiated manually from the View Mail window.

      PGP messages only
      If checked, only messages which are PGP encrypted are automatically decrypted. (Only the first 4K of the message, including headers, is scanned for a PGP header. PGP messages later in the message will not trigger automatic decryption.)

    Prompt for unknown private-key passphrases
    During decryption, if JBN encounters a PGP message encrypted to a private-key for which it does not have the passphrase, should it prompt you for the passphrase? Note that you will be prompted for each message decrypted - JBN does not store your passphrase. For greater automation set the passphrase in Window|Nym Accounts Registry|Key Passphrases.

    Decode all PGP messages inline
    If unchecked (recommended), PGP messages which appear to be encrypted binary files will be left undecrypted in the final message. (They may then be copied to the clipboard or saved and decrypted in PGP.) In most cases JBN can tell the difference between binary files and text files which contain some binary (international) characters, and it will decrypt binary text messages inline.

    If checked, all PGP messages regardless of content will be decrypted and included inline as text. Use this setting only if JBN fails to detect text which contains a large proportion of binary characters. Depending on content, this setting may cause a software failure during message decryption or display.


Filters

Settings which affect the storage and display of mail and news messages.

    Anti-SPAM Filters
    In this box list search strings, one per line, used to detect unwanted messages. A search string may contain wildcards.

    Each mail and news message is scanned after retrieval and again after decryption. The top 4K (about 2 pages) of each message is scanned, including headers. If a search string is detected, the message is moved to the Trash\Spam folder located in the Mail Folder. Note that when you select Window|View Mail|File|Empty Trash, these messages are then deleted. Be sure to use accurate and not overly general search strings to prevent lost mail.

    From Aliases
    When a remailer sends a message it often identifies itself as 'Anonymous'. If you receive mail from different remailers, the name 'Anonymous' is listed in the View Mail window, and it is difficult to detect one remailer's messages from another's.

    From Aliases are used to solve this problem. If the alias address is detected in the From header of a message, the sender will be identified as the alias name. This only affects the Sender column of the View Mail window. It does not affect the From header of the message. From Aliases have no effect on outgoing mail, and their use is not required.

    To set a From Alias, enter the email address (or a portion of it) which appears in a remailer's From header. (Note that this address usually differs from the remailer's incoming mail address.) Follow this with at least one space and enter the alias name. For example:

    		nobody@xyzremailer.com  Xyz
    	
    Enter one alias text/name pair per line.

    After updating the From Aliases, you will need to select Folder|Rebuild Index in the View Mail window (for each folder) to see the change on previously indexed mail.

    After a remailer shuts down, remove its alias.




Window|Books Config

Options

Options affecting the behavior of Message Books and Nym Books.

    Confirm book overwrite
    Should JBN ask you before overwriting an existing book file?

    Confirm text overwrite
    When saving text, should JBN ask you before overwriting an existing file?

    Prompt to save changes
    Before closing or reloading a Message Book or Nym Book window, should JBN prompt you to save unsaved changes?

    Confirm clear
    Should JBN ask for confirmation when you clear a book, text, or a reply-block?

    Zero remailers warnings
    If checked, JBN will warn you if you forget to add remailers to a message before pressing Queue. It is very highly recommended that you keep this option checked. If unchecked, you will be given no warning if you forget to add remailers, and your original headers will be visible to the recipient.

    Pop-up capability warnings
    If checked, JBN will issue warnings when you use a directive or function which a remailer does not support. These warnings are based on your remailer capability strings. Disabling this option increases the likelihood of mail being lost due to user error.

    Pop-up stats warnings
    If checked, JBN will issue a warning when you attempt to use a remailer whose current stats are poor. This determination uses the same criteria used for AUTO remailer selection, set in Window|Remailers Config. Note: If stats are not available for a remailer, no warning is issued.

    Uptime-Hist Preferred
    If your stats source provides version 2 stats, JBN can display either Uptime-Hist or Latent-Hist in your drop-down list of remailers. Uptime-Hist provides a better picture of general reliability, while Latent-Hist provides more details on latency. If this option is checked, and if your stats source provides Uptime-Hist, it will be displayed in preference to Latent-Hist. Note: Regardless of this setting, both histories are visible in the Remailer Editor and on the Stats Page.

    Alter PGP Timestamp
    Nym messages are PGP signed using your private key, and encrypted to the nym-server. Because PGP signatures contain the time of signing, the nym-server can see when the message was created, and can infer when it was mailed. This is a potential traffic analysis weakness. If you check Alter PGP Timestamp, JBN will set your system clock to midnight GMT just before creating a signed PGP message, and set it back immediately after PGP has run. This effectively alters the time of the signature to 00:00 GMT.

    IMPORTANT: Reliable remailer operators should never use this option while Reliable is running, as the system clock change will interfere with Reliable's functioning. Other programs on your system may also be adversely affected if they rely on the system clock.

    If this option is checked, all signed PGP messages produced by JBN will use this effect. Some minor deterioration of system clock accuracy may be expected with this feature.

    Double-click opens full
    If checked, double-clicking in the text box of a Message Book will change to full mode text editing (same as selecting the Full Text tab). Likewise, double-clicking in the Headers box will switch to the larger Headers box on the Extra tab.

    Text Font / Size
    The font and size used for the text box of Message books, and the Notes tab of Nym Books. Press Change to define the font or Default to restore the settings to their original values.

    Quote message in reply
    When you reply to an email message using Tools|Reply To Clipboard and Follow-Up Clipboard, should JBN include the quoted text of the message in your reply? If set to Prompt, JBN will ask you each time.

    Quote characters
    The character or characters which precede each line of quoted text. Default is >.

    Reply Heading
    When you reply to a message in JBN (using the View Mail window or the Reply To Clipboard feature), a reply heading is placed at the top of the quoted text reading "On [date], [sender] wrote:". This reply heading may be customized by selecting a different heading from the list or entering a custom heading. There are separate settings for replies to email and news posts.

    Variables, such as $from, $date, $newsgroup, etc., may be used in the reply heading. JBN will substitute the appropriate value. For a list of variables see the drop-down list.

    IMPORTANT: The Reply Heading settings are global. If you have multiple nym accounts or online identities, using a unique reply heading may help others to correlate your posts and/or email. In this case you may wish to use the default reply heading (first in the list), or no reply heading.

    Global Signature
    A custom signature which may be pasted into messages using Edit|Paste Signature. If a book has a local signature set (in Options), it will override the global signature for that book. Note: For security reasons, JBN will never automatically add a signature to a message. You must explicitly paste the signature. If you always want a signature, add the text to a Message Template.


Choice Lists

The choice lists are used to customize the drop-down lists in Message and Nym Books.

    Header Choice List
    This list should contain email headers which you commonly use in your messages. You may include just the header name and colon, or a complete header. Once configured, this list will appear in the drop-down list beneath the header box in Message Books.

    Directive Choice List
    This list should contain Cypherpunk remailer directives. You may include just the directive name and colon, or a complete directive. This list will appear in the drop-down list of the Remailer Editor, in both Message and Nym Books.



Window|Remailers Config

Auto

Settings which determine which Cypherpunk and Mixmaster remailers may be chosen as AUTO remailers. These settings also affect when pop-up stats warnings are displayed for remailers you choose explicitly. Pop-up stats warnings may be disabled in Window|Books Config|Options.

    Minimum Uptime% (CPunk)
    The minimum uptime value (between 0 and 100) which a Cypherpunk AUTO remailer must have in stats. 95-98 is the recommended range. This setting also affects when pop-up stats warnings are displayed for explicit remailers.

    Max Latency (hh:mm) (CPunk)
    The maximum average default latency which a Cypherpunk AUTO remailer must have in stats. Recommended setting is 4:00 (4 hours). This setting also affects when pop-up stats warnings are displayed for explicit remailers.

    Minimum Distance (CPunk)
    The minimum number of remailers which must follow a remailer before the same remailer appears again in a chain. For example, if set to 1, this prevents JBN from choosing the same remailer two times in a row in a chain. If set higher, the same remailer will not be used again in the chain for the specified number of positions. Recommended setting is 4 or higher. If Distance is set higher than the length of the chain, the same remailer will never be chosen twice for an AUTO position. However, using a high distance setting may cause JBN to report insufficient remailers with long chains. This setting affects Cypherpunk AUTO remailer selection.

    Use Defaults
    Pressing this button will reset the AUTO values to their recommended values.

    Consider History
    If checked, JBN will examine the Uptime-Hist (or history) column in stats, and will take this information into consideration when selecting remailers. A poor showing in the right-most two columns (the last 48 hours) will cause JBN to reject the remailer as an AUTO candidate. This setting affects both Cypherpunk and Mixmaster AUTO remailer selection, and pop-up stats warnings.

    Never choose these remailers as AUTO or RANDOM
    If because of unreliability or security concerns you don't want certain remailers to be chosen as AUTO or RANDOM remailers, list the remailers' names or addresses here, one name or email address per line. This affects both Cypherpunk and Mixmaster AUTO and RANDOM remailer selection.

    Note: When updating this setting, for a change to take effect for RANDOM remailers, stats must be refreshed.

    The following list has no effect [Variable]
    This list may have a variety of functions. Select the heading which describes how you want the list to be treated. This list may be used to waive uptime and/or latency requirements for some remailers (due to lack of stats or stats inaccuracy), or may be used to limit AUTO remailer selection to only those remailers you explicitly list here. This list affects both Cypherpunk and Mixmaster AUTO remailer selection.


Mixmaster

Settings for your Mixmaster installation, required if you are using Mixmaster with JBN. Some of these settings also affect AUTO and RANDOM remailer selection, and when pop-up stats warnings are displayed for Mixmaster remailers you choose explicitly.

    Program Folder
    This must be set to the folder which contains mixmaste.exe, usually C:\Mix

    Mixmaster Version
    Which version of Mixmaster are you running?

    MINREL
    This setting is equivalent to the Auto|Minimum Uptime% setting for Cypherpunk. MINREL determines the minimum uptime (0-100) which a Mixmaster remailer must have in stats for it to be chosen as either an AUTO or RANDOM remailer. This setting also affects pop-up stats warnings. Recommended setting is 95-98.

    MAXLAT
    This setting (in hours - do not use hh:mm format) is equivalent to the Auto|Max Latency setting for Cypherpunk. MAXLAT determines the maximum average default latency which a Mixmaster remailer may have in stats for it to be chosen as either an AUTO or RANDOM remailer. This setting also affects pop-up stats warnings. Recommended setting is 4 (hours).

    DISTANCE
    This setting is equivalent to the Auto|Minimum Distance setting for Cypherpunk. DISTANCE determines the minimum number of remailers which must follow a remailer before the same remailer appears again in a chain. Recommended setting is 4 or higher.

    Change Advanced Settings
    Check this to make modifications to the advanced Mixmaster settings described below. Most users who install Mixmaster into a single folder need not change these settings. IMPORTANT: If you run a Reliable remailer on your system, you should uncheck Auto-maintain mixmaste.con.

    MIXPATH
    The folder containing mixmaste.con, and other default-located Mixmaster files. If the MIXPATH environment variable is set in your Autoexec.bat file, you should set this to the same folder, or leave it blank. Leaving this setting blank causes JBN to assume MIXPATH matches Program Folder (above).

    Auto-maintain mixmaste.con
    If checked, JBN will rewrite your mixmaste.con file so that it always matches your JBN configuration settings. It is highly recommended that this option be checked. However, if you are running a Reliable remailer on your system, you should uncheck this option and let Reliable maintain mixmaste.con. In that case, be sure to set your JBN Mixmaster configuration (Window|Remailers Config|Mixmaster) to match your settings in Reliable's Window|Configuration|Mix. If Auto-maintain is unchecked, RANDOM remailers may use different selection criteria than AUTO remailers.

    Type2.lis
    The name or pathname of your Mixmaster type2.lis file. If no path is specified MIXPATH is assumed. Default is type2.lis.

    Pubring.mix
    The name or pathname of your Mixmaster pubring.mix file. If no path is specified MIXPATH is assumed. Default is pubring.mix.

    RELLIST
    The name or pathname of your Mixmaster statistics file. If no path is specified MIXPATH is assumed. Default is mixmaste.htm. This file is automatically updated by JBN each time Mixmaster stats are refreshed. Mixmaster uses this file to choose RANDOM remailers.


Mix Keys

This tab allows you to edit and update your Mixmaster remailer list and keys (type2.lis and pubring.mix). This list affects what remailers appear in the drop-down list in Message Books.

To add a new remailer, or to update the key for a remailer, paste the remailer's full Mixmaster key into the lower box and press Add/Update. (You can also add and update Mix keys automatically by selecting Window|Explore||Tools|Get Mix Keys.)

To remove a remailer from your list, select the remailer and press Remove. The remailer's key will also be removed.


Capabilities

Remailer capability strings and other regularly updated information is stored here.

    Remailer Capability Strings
    All current remailers should have a capability string here, both Cypherpunk and Mixmaster. This tells JBN what capabilities a remailer has, which affects AUTO remailer selection and pop-up capability warnings. JBN determines what Cypherpunk remailers are available using this string list. (Available Mixmaster remailers are determined by type2.lis in Remailers Config|Mix Keys.) It is important to keep this list up-to-date, and to remove strings of extinct remailers. To add a Cypherpunk remailer which is not listed in your stats to JBN, just paste its capability string here. All PGP remailers listed must have a key on your PGP keyring.

    Auto-Refresh [Remailer Capability Strings]
    If checked, the Remailer Capability Strings will be updated when stats are refreshed using your Primary CPunk Stats URL. Keeping Auto-refresh checked is a good way to be sure your strings are up-to-date, providing your stats source is up-to-date. If you prefer to maintain these strings yourself, uncheck this box.

    Machine and Chain Info
    The text included in this box is a portion of reliability stats reports. This text provides information on what remailers share the same machine or operator, and what remailers are not working properly in chains to other remailers. This information may be consulted by the user for reference. In addition, JBN automatically interprets the chaining information when selecting AUTO remailers, and when issuing capability warnings. (JBN does not consider the shared machine section.)

    Auto-Refresh [Machine and Chain Info]
    If checked, the Machine and Chain Info text will be updated when stats are refreshed using your Primary CPunk Stats URL, providing your stats source provides this information. If you prefer to maintain this text yourself based on your own testing of remailers, uncheck this box. Note that this information must be presented in the standard format or will be ignored by JBN.



Window|Stats Config

Options

Settings affecting automated stats retrieval and general operation of the Stats Browser window.

    Refresh stats every n hours
    If checked, JBN will automatically retrieve stats when the specified number of hours have elapsed since the last refresh, providing you are online. Minimum accepted setting is 1 hour. Recommended setting is 4-6 hours. This option helps insure that AUTO remailers are chosen using fresh reliability statistics, and that your drop list of remailers displays current information. If unchecked, JBN will not refresh stats unless you initiate retrieval explicitly.

    Refresh capability strings
    This is the same setting which appears in Remailers Config|Capabilities. If checked, the Remailer Capability Strings will be updated when stats are refreshed using your Primary CPunk Stats URL. Keeping this checked is a good way to be sure your strings are up-to-date, providing your stats source is up-to-date. If you prefer to maintain these strings yourself, uncheck this box.

    Refresh machine and chain info
    This is the same setting which appears in Remailers Config|Capabilities. If checked, the Machine and Chain Info text will be updated when stats are refreshed using your Primary CPunk Stats URL, providing your stats source provides this information. If you prefer to maintain this text yourself based on your own testing of remailers, uncheck this box.

    Temporary Cache Folder
    This is where pages downloaded by the Stats Browser are stored temporarily. WARNING: All files in this folder are deleted each time the Stats Browser window is closed. Do not set this folder to the JBN work path. This folder should be used only for cache files.

    Files To Cache
    The number of pages which the Stats Browser will cache (remember) during a session. This allows you to view the same page again without it being reloaded. Set this lower if your Cache Folder has limited space.

    Proxy A
    The URL of an HTTP proxy server. Several examples are available in the drop-down list. Note: this setting has no effect unless Stats Browser|Options|Proxy Visits Via A or Proxy Stats Retrieval is checked.

    Proxy B
    The URL of another HTTP proxy server. Note: this setting has no effect unless Stats Browser|Options|Proxy Visits Via B or Proxy Stats Retrieval is checked.

    Text Color; Link Color; Background Color
    These buttons allow you to change the default colors used in the Stats Browser.

    Restore Default Colors
    Press this button to reset the colors to your system defaults.


Cypherpunk

Settings affecting retrieval of Cypherpunk reliability statistics and keys. These settings should be regularly updated with current URLs for best results. Check the Potato Software Helpful Links page for URLs (Stats Browser|Software|Helpful Links).

    CPunk Stats URLs
    List all known URLs (one per line) for Cypherpunk stats here, in order of preference. Note that a 'URL' in the Stats Browser may be an http URL, an email address to finger, or a local disk file pathname. JBN2 reads both version 1 and version 2 Cypherpunk stats reports. (Use version 2 when available for more detail.) The first URL listed is considered your primary source and will be the only URL used to update capability strings and machine and chain info, when applicable. The other URLs listed are backup stats URLs, and are accessed only if the primary URL fails. All are displayed on the Stats page for reference.

    CPunk Chain Stats URLs
    List URLs here for Cypherpunk Chaining reports, or any other accessory information. These reports are not automatically downloaded or interpreted by JBN. These URLs are displayed on the Stats page for convenient user reference. Chain stats give an indication of which remailers work best in particular types of chains.

    CPunk Keys URLs
    List all known CPunk Keys URLs here. One or all of these URLs may be optionally accessed when you update your Cypherpunk remailer PGP keys. (Stats Browser|Tools|Get CPunk Keys)


Mixmaster

Settings affecting retrieval of Mixmaster reliability statistics and keys. These settings should be regularly updated with current URLs for best results. Check the Potato Software Helpful Links page for URLs (Stats Browser|Software|Helpful Links).

    Mix Stats URLs
    List all known URLs (one per line) for Mixmaster stats here, in order of preference. Note that a 'URL' in the Stats Browser may be an http URL, an email address to finger, or a local disk file pathname. JBN2 reads both version 1 and version 2 Mixmaster stats reports. (Use version 2 when available for more detail.) The first URL listed is considered your primary source and will be the only URL used to update capability strings and machine and chain info, when applicable. The other URLs listed are backup stats URLs, and are accessed only if the primary URL fails. All are displayed on the Stats page for reference.

    Type2.list ; Pubring.mix URLs
    Each line of this box must contain two URLs, separated by a single semicolon (;) indicating the location of a set of type2.lis and pubring.mix files, respectively. List your best source pair first, followed by secondary sources. One or all of these URL sets may be optionally accessed when you update your Mixmaster keys. (Stats Browser|Tools|Get Mix Keys)


Bookmarks

Bookmarks for commonly accessed URLs may be set here. These appear in the drop-down URL list of the Stats Browser.

    Title
    This is the name or title of the page which will appear in the drop-down list.

    URL
    The URL of the page. Note that a URL in the Stats Browser may be an http URL, an email address to finger, or a local disk file pathname. Ftp and other URL types are not supported.

    New
    To add a new entry to the list, select the position for the new bookmark. Enter the new bookmark's Title and URL, then press New. To change an existing entry, select it and edit the information.

    Delete
    To remove a bookmark from the list, select it and press Delete.

    Up / Down
    To move a bookmark up or down in the list, select it and press Up or Down.



Window|Send Profiles

Send profiles are used to specify how mail is sent from JBN. When a message is queued, it is queued to a specific Send Profile.


SMTP Tabs

Each SMTP tab contains a group of settings, or profile, for sending mail. If you use more than one ISP, SMTP server, or email address to send mail, you can configure a different profile for each. These settings affect how final messages are sent directly from JBN's mail queue. When using remailers, these settings are not seen by the final recipient.

IMPORTANT: The profile tab which is on top when you press OK is used as your Default SMTP Profile for sending mail.

    Enable
    If checked, this profile may be used for queuing and sending mail. When unchecked, mail may not be queued to this profile, and any queued mail is held indefinitely.

    Profile Nickname
    A short name by which you can refer to this profile, such as My ISP. Note: If you change a profile's nickname when there are messages queued to that profile, you will also need to change the profile of the queued messages for them to be sent.

    SMTP Server
    The SMTP host name, eg smtp.myisp.com, to be used for mail sent via this profile.

    Note: If you need to specify a remote port, follow the host name with a colon and the port number, eg smtp.myisp.com:25

    From Header
    The exact text which will appear in the From header of sent messages. Some valid formats include:

            youremail@address.com
            youremail@address.com (Your Name)
            Your Name <youremail@address.com>
            "Your Name" <youremail@address.com>
        
    Note: If SMTP From Address (below) is blank, and if no Reply-To header is specified, the address in the From header is used as the SMTP From Address. Some ISPs require this address to contain a valid domain, or require it be from their domain. It is generally advisable to place your real email address here, unless you specify an SMTP From Address or a Reply-To header below.

    Reply-To Header [Optional]
    An optional header added to outgoing messages sent via this profile, specifying where replies should be sent. If SMTP From Address is blank, this address will be used as the SMTP From Address, in which case it should contain a valid email address.

    SMTP From Address [Optional]
    The address which the server recognizes as the sender, and to which bounces are sent. This address may be different than the address specified in the From or Reply-To headers (above), in which case the address in those headers may be bogus. Some servers display the SMTP From Address in the headers of outgoing mail, others do not. If SMTP From Address is left blank, the address in the Reply-To or From header is used.

    Additional Headers [Optional]
    Any additional email headers to be added to mail messages sent via this profile, one per line.

    Generate CPunk Dummies
    If checked, and if this profile is enabled, JBN will generate dummy Cypherpunk messages to be sent via this profile, to act as cover traffic for your outgoing mail.

    Generate Mix Dummies
    If checked, and if this profile is enabled, JBN will generate dummy Mixmaster messages to be sent via this profile.


UNIX Tab

The UNIX profile is a special profile which writes mail to a file or folder instead of sending it via SMTP. If you run a Reliable remailer on your system, you can use the UNIX profile to send mail directly to your remailer's MAILIN folder. The UNIX profile may be selected explicitly when mail is queued. Also, if the default SMTP profile is used to send mail, and the single recipient is listed in the address list below, the UNIX profile will automatically be used in lieu of the default SMTP profile.

    Enable UNIX
    If checked, mail may be explicitly or automatically queued to the UNIX profile, and queued messages will be sent (written). If unchecked, no mail will be queued to the UNIX profile, and queued messages will not be sent.

    When sending to the following addresses...
    Enter a list of email addresses, one per line, which should cause the UNIX profile to override the default SMTP profile for sending. If you run a Reliable remailer on your system, enter your remailer's address here.

    ...override the default profile and write the message to
    Select whether messages should be written to a folder or appended to a UNIX mail file. If using a Reliable remailer, select Folder and specify your remailer's MAILIN folder here.

    From Header
    The exact text which appears in the From header of messages sent via the UNIX profile. (This header may be used to trigger a Source Allow in Reliable.)

    Additional Headers [Optional]
    Any other email headers to be added to messages sent via the UNIX profile, one per line.



Window|Retrieval Profiles

Retrieval profiles are used to specify what POP3 servers JBN is to retrieve mail from, which messages should or should not be retrieved, and where the mail is to be saved.


POP3 Tabs

Each POP3 tab contains a group of settings, or profile, for retrieving mail from a POP3 server. If you use more than one ISP or POP3 server, or wish to filter different kinds of messages to different folders, you can configure a different profile for each.

    Enable
    If checked, this profile will be used when mail is retrieved. When unchecked, this profile is ignored.

    Profile Nickname
    A short name by which you can refer to this profile, such as My ISP. This nickname is displayed in error and status messages.

    POP3 Server
    The POP3 host name, eg mail.myisp.com, to be used for mail retrieval via this profile.

    Note: If you need to specify a remote port, follow the host name with a colon and the port number, eg mail.myisp.com:110

    POP3 User
    Your username on this POP3 server. For example, if your email address is myname@myisp.com, your username is myname

    POP3 Password
    The password for the POP3 User.

    Check mail every n minutes
    If you want JBN to retrieve mail from this profile automatically, check this box and enter the minimum number of minutes between checks in the box to the right. If unchecked, mail will be retrieved from this profile only when Tools|Check Email is selected.

    Ignore mail larger than n K
    If checked, any mail which exceeds the specified number of kilobytes (including headers) will be left on the server for later retrieval.

    Save Mail To Folder/File
    If Folder is selected, mail retrieved from this profile will be saved to the specified folder. Specify a full folder pathname. If left blank, mail is saved to the default Inbox, located in the Mail Folder (eg C:\JBN2\Mail\Inbox). [Note: After decryption a message may be moved to the Decryption Folder, if set.]

    If File is selected, you must specify the pathname of a file. If the file does not exist it will be created. Retrieved messages will be appended to this file in UNIX Message File Format.

    Delete saved mail from server
    If checked, after a message is retrieved and saved, it will be deleted from the POP3 server. If unchecked, it will be left on the server, in which case it will be retrieved and saved again every time mail is retrieved. The unchecked setting is primarily for diagnostic and testing purposes.

    Filtering
    The upper filter box indicates which messages are to be retrieved from this profile; the lower filter box indicates which messages are to be ignored or deleted. The lower filter takes precedence.

    To retrieve all messages, set the upper filter to Retrieve all messages and the lower filter to The following text has no effect.

    To limit retrieval to only PGP messages, set the upper filter to Retrieve only PGP messages. In this case, any plain (non-encrypted messages) will be left on the server, perhaps for retrieval by another application.

    To limit retrieval to custom criteria, set the upper filter to Retrieve only messages containing the following. In the upper filter box, enter search strings, one per line. (Wildcards may be used to generalize search strings.) The headers and first 15 lines of each message will be scanned for the search string(s) you have entered. If any is found, the message may be retrieved. Otherwise, the message will be left on the server.

    The lower filter works similarly. Search strings are entered, one per line. Depending on the filter setting, any messages which match a search string are left on the server or deleted without retrieval.




Window|News Profiles

News profiles are used to specify what news servers JBN is to retrieve articles from, what newsgroups are to be scanned, which articles are to be saved, and where they are saved.

JBN is not a full news client. For example, it cannot post via NNTP. Its NNTP features are primarily intended to support nym reply-blocks which terminate in newsgroups. JBN will scan newsgroups for your messages.


NNTP Tabs

Each NNTP tab contains a group of settings, or profile, for retrieving articles from an NNTP server. If you use more than one ISP or NNTP server, or wish to filter different kinds of articles to different folders, you can configure a different profile for each.

    Enable
    If checked, this profile will be used when news is retrieved. When unchecked, this profile is ignored.

    Reset Index
    Resetting the index for this profile will cause JBN2 to start retrieval at the first available article in each group on this server. If you change your retrieval criteria and want to scan past messages, use this button to scan all messages. Otherwise JBN remembers the last article scanned and will only scan forward. (If Window|Retrieval Config|Filter news duplicates is checked, you may also wish to delete JBN2NEWS.IDX in the Mail Folder to insure all messages are saved.)

    Profile Nickname
    A short name by which you can refer to this profile, such as My ISP. This nickname is displayed in error and status messages.

    NNTP Server
    The NNTP host name, eg news.myisp.com, to be used for news retrieval via this profile.

    Note: If you need to specify a remote port, follow the host name with a colon and the port number, eg news.myisp.com:119

    NNTP User
    If the NNTP server requires authentication, enter your username here. Otherwise this box may be left blank.

    NNTP Password
    If the NNTP server requires authentication, enter your password here. Otherwise this box may be left blank.

    Get news every n minutes
    If you want JBN to scan news from this profile automatically, check this box and enter the minimum number of minutes between scans in the box to the right. If unchecked, news will be retrieved from this profile only when Tools|Get News is selected.

    Lines Min to Max [Optional]
    This setting is used to set a minimum and/or maximum article size. Any articles with fewer than Min lines or more than Max lines are ignored. If you don't want to use this feature, leave these boxes blank.

    Save News To Folder/File
    If Folder is selected, articles from this profile will be saved to the specified folder. Specify a full folder pathname. If left blank, articles are saved to the default Inbox, located in the Mail Folder (eg C:\JBN2\Mail\Inbox). [Note: After decryption a message may be moved to the Decryption Folder, if set.]

    If File is selected, you must specify the pathname of a file. If the file does not exist it will be created. Retrieved messages will be appended to this file in UNIX Message File Format.

    Newsgroups
    In this box, specify what Newsgroups (eg alt.anonymous.messages) are to be scanned, one per line. Wildcards may NOT be used in this box.

    Save the following articles
    This box is used to specify Subject, encrypted Subject (esub), or From headers of articles to be retrieved and saved. For example:

    		Subject: My Message
    		From: *@myremailer*
    		Subject: Attn: *My Name*
    		My Message 2
    		Esub: My Encrypted % subjectkey
    	
    If no header is specified, Subject is assumed. Wildcards may be used. Headers other than Subject and From are not scanned.

    To retrieve and save all articles in a group, enter only an asterisk (*) in the box.

    To scan for encrypted subjects, Enter "Esub:", a single percent (%) sign, and the Encrypt-Subject key.

    Note: You can export subjects directly from a Nym Book reply-block by selecting Tools|Export Subject.

    Don't save the following articles
    This box is used to specify Subject or From headers of articles which are not to be saved. For example:

    		SPAM Message
    		From: *@spamdomain*
    	
    The Don't save criteria takes precedence over the Save criteria.

    Fully retrieve all articles in lines range
    If checked, all articles in the specified newsgroups are fully retrieved. Only those articles matching your save criteria are actually saved. Articles which fall outside of the Min and Max Lines setting (see above) are not retrieved. If unchecked, only those articles matching your save criteria are retrieved.

    This feature is used to greatly improve your anonymity. No one monitoring your connection or NNTP server is able to determine which messages you are saving. They only know you are retrieving all messages in the newsgroup(s).




Window|Nym Accounts Registry

Nym Accounts

The Nym Accounts Registry is used to store information about each of your nym accounts to help automate various tasks. This registry will be updated automatically each time you run (Create) a Nym Book if Options|Update Registry is checked (recommended).

    Account Address
    The full account address of your nym, such as example@nym.alias.net

    Account PGP Key
    This is the public/private key pair used create and send messages from your nym account.

    Conventional Passphrases
    This box contains the most recently created Encrypt-Key passphrases for the reply-blocks of this account, used for decrypting incoming mail. (Generally, conventional passphrases are not as sensitive as private-key passphrases. They are mainly used to provide greater anonymity to your mail as it travels to you.)

    Prior Passphrases
    This box contains prior conventional passphrases for the account. These belong to reply-blocks which have been replaced. JBN will store up to 30K of old passphrases, after which it will automatically begin purging passphrases based on date of creation and date last used. This storage allows mail to your old passphrases to be decrypted while your new reply-block is pending confirmation. To optimize performance if you have many accounts, you may carefully remove unused blocks manually.


Key Passphrases

This tab is used to give JBN your private-key passphrases for more automation. You may include the passphrases to nym account keys, as well as any other keys. JBN will automatically sign messages and decrypt incoming messages which require a passphrase. Depending on your local security requirements, you may or may not wish to enter your passphrases here. If you do, this information is stored in your configuration file. It is recommended you enable Secure Mode or use disk encryption to protect your passphrases.

To add a key passphrase, select a key in the Private Key box and enter the passphrase. (You can also reenter the passphrase in the second box for verification.) Press Add/Update. You can test any passphrase by double-clicking on the entry in the list.

To change a key's passphrase, select the entry in the list, enter the new passphrase, and press Add/Update.

To remove a passphrase from the list, select the entry and press Remove.

    Private Key
    The key for which you wish to provide a passphrase. This should be a private key. Public keys do not require passphrases.

    Passphrase
    The private-key passphrase. If using PGP version 2.6.x, this passphrase should not exceed approximately 80 characters for proper operation. If using PGP 5.5.3x or 6.x, this passphrase may be up to 255 characters in length.

    Re-enter Passphrase (Optional)
    If desired, reenter your passphrase a second time here, and JBN will check to make sure you did not make a typing error. You can also double click on any entry in the list to test the passphrase for the key.



Wildcard Usage

Several configuration items in JBN allow the use of wildcards to generalize search strings. For example, the following search string:
    A*B
would match any string that begins with A (upper or lower case) and ends with B. For example: AAB, ACCB, ABBBB. It is important to make wildcard strings as specific as possible to avoid unintended matches, which may result in unexpected results.

A search string can specify more than one line with use of the caret (^), which specifies a carriage return (CRLF). If a caret is placed at the left of the search string, for example, this indicates that the text must be at the left side of a line to be matched. Other wildcard characters are listed in the table below.


Wildcard Characters
Characters in pattern Matches in string
? Any single character.
* Zero or more characters.
# Any single digit (0–9).
^ A carriage return (CRLF)



Wildcard Examples
Kind of match Pattern Match No Match
Multiple characters a*a aa, aBa, aBBBa aBC
Multiple characters *ab* abc, AABB, Xab aZb, bac
Multiple characters ab* abcdefg, abc cab, aab
Single character a?a aaa, a3a, aBa aBBBa
Single digit a#a a0a, a1a, a2a aaa, a10a
Multiple lines AAA^BBB AAA
BBB
AAABBB



Program Security

Program Data

Program Data refers to the information on your PC, including JBN2 configuration data, stored email messages, and PGP keyrings. JBN2 includes a number of features which allow it to be used more safely in various environments.

The following is a list of data storage areas used by JBN2. In the section which follows, several methods will be discussed for securing this data.

    Program Folder
    Your JBN2 program folder contains the program itself, JBN2.EXE, help files, and other supplemental files. No files normally in the program folder require security measures. In general you should not interfere with the files in the program folder, or store other files there.

    Config Folder
    JBN2 stores no configuration data in your Windows registry. Your configuration data, which includes everything you have customized since you installed JBN2, such as remailers, email addresses, nym account and secret key passphrases, is all stored in the Config folder. There are two files in this folder which hold the data. JBNData.DAT contains generally trivial items like window sizes and locations, pathnames of recent files, and other internal program data. This file generally does not need to be secured. JBNConf.DAT contains your configuration, including your passphrases. This file is not securely encrypted unless Secure Mode is enabled (see below), or unless the Config folder is stored on an encrypted drive. Incidentally, by backing up the Config folder, you have a backup of your entire configuration.

    Books Folder
    Message and Nym Books, normally stored in your Books folder, are used to store email messages and nym account configuration information. Books provide a convenient way to automate anonymous mail tasks, and allow for more accurate testing and repetition of successful techniques. However, book files are not encrypted by JBN2. Depending on your security needs, you may wish to locate your Books folder on an encrypted drive.

    Mail Queue Folder
    The Mail Queue Folder contains messages waiting to be sent. In general, the Queue folder does not need to be secured, because remailer messages are already encrypted. If you send plain messages (without remailers) of a sensitive nature, you may wish to relocate the mail queue to an encrypted drive by adjusting Window|Global Config|Program|Mail Queue Folder.

    Mail Folder
    The current Mail Folder, configured in Window|Retrieval Config|Mail Folder, contains mail messages retrieved via POP3, news articles saved via NNTP, and decrypted messages. The Mail Folder also stores the JBN2NEWS.IDX and JBN2NYM.IDX files. If Window|Retrieval Config|Filter News Duplicates or Trash Nym Duplicates is checked, these files contain the Message-ID of all news articles or nym messages saved within the last 7-10 days.

    Stats Folder
    The Stats folder is used to store downloaded reliability statistics web pages, and the Stats page, which may also be bookmarked in your browser. This folder contains no sensitive data. This folder may NOT be relocated.

    Stats Cache Folder
    This folder is located in your Stats folder by default. It is used by JBN2's Stats Browser to store web pages temporarily during download. Each time you close the Stats Browser window, ALL files in this folder are deleted. If you use the Stats Browser to download web pages of a sensitive nature, the Stats Cache folder may be relocated on a RAM drive or an encrypted drive for greater security.

    Work Folders
    Work folders are used to store temporary data. For example, when JBN2 creates remailer messages and reply-blocks, it saves various intermediate temporary files. In general, JBN2 will use the folder specified in Window|Global Config|Program|Work Folder. However, local work folders may also be used for Message Books, specified on the Extra page of each book. Temporary work files are generally deleted, but you should periodically check the work folder for leftover files, especially if the program or OS crashes. For greater security, locate your work folder on a RAM drive or encrypted drive.

    Windows Temp Folders and Swap File
    You should make a note of the location of all temporary folders used by Windows, such as C:\Windows\Temp, and check them periodically for sensitive data. While JBN2 does not use these folders directly, program and temporary data may be placed there by Windows. In addition, program data may be swapped in the Windows swap file. Depending on your security needs, you may wish to periodically wipe the swap file using an appropriate utility, such as BCWipe. You should NOT generally relocate your Windows temp folders or swap files to a RAM drive or encrypted drive. Doing so may crash Windows.

    PGP Keyrings
    You should make a note of the location of your PGP public and private keyring files. Your public keyring contains an open list of all keys you use. And although your private keyring is passphrase protected, it is still worth securing, because some software is designed to steal passphrases by monitoring the keyboard, and because your passphrases may be stored in JBN2's configuration data (see above). For greater security, store your keyrings on an encrypted drive. This conceals the list of keys in use, and also protects your secret keys even if the passphrase is stolen.

    PGP Temp Folder
    If using PGP 2.6.x, you should make a note of the folder which PGP uses for temporary files. If your TMP environment variable is set, it will use that folder. Otherwise, it will use the TMP setting in PGP's config.txt file. PGP will often leave temporary files behind if the program terminates prematurely, and these often contain the data being encrypted.


Secure Mode

Secure Mode is used to secure your JBN2 configuration data with PGP conventional (IDEA) encryption. To enable Secure Mode, check the option in Window|Global Config. You will be prompted for a passphrase. This passphrase will be used to encrypt your configuration. Each time you start JBN2, you will need to enter this passphrase.

When encrypting your configuration data (each time it is modified), JBN2 first writes the data to the Global Config|Work Folder. After encrypting it, the file is wiped using Global Config|Wipe Files Using. When decrypting, the reverse of this procedure is used.

Note that Secure Mode only secures JBNConf.DAT, which contains your configuration data. JBNData.DAT is not encrypted, nor are Books, Mail, or other data. For greater security and convenience, store your Config folder on an encrypted drive, as described below.

IMPORTANT: If you are NOT using an encrypted drive (see below), and you have set private key passphrases in JBN2's Nym Accounts Registry, you should use Secure Mode to protect your passphrases and other data with strong encryption.


Other Security Methods

JBN2 is designed to work flexibly with disk encryption and RAM drive software. This software allows you to conveniently store much or all of your data securely.

A (virtual) encrypted drive may be configured on your system using disk encryption software, such as ScramDisk, PGPDisk (included with PGP 6.x), and BestCrypt. This software creates an encrypted file on your hard drive of any size you specify. When you start your system, you mount the file by providing the passphrase, and the file appears as a new drive on your system. Any data may be written to and read from this drive. It is automatically encrypted/decrypted when written/read. When you dismount the drive or shut off your computer, the data is secure. Disk encryption software is fast and quite secure, using the same level of encryption used by PGP.

A second data storage device is a RAM drive. A RAM drive is a device driver which simulates a disk drive using a section of RAM (memory). Because it uses RAM, data written to such a drive a) is not written to a physical disk, and thus does not need to be wiped, b) is automatically lost when the computer is shut off. RAM drives are used to store only temporary data. They are also generally much faster than a physical drive. By storing temporary files on a RAM drive, you need be less concerned with leftover work files and recoverable data on the hard drive.

A RAM drive device driver is included with Windows. To add a RAM drive to your system, add or update the following lines (or similar) to the end of your C:\Config.SYS file, and reboot your computer:

   devicehigh=C:\Windows\himem.sys /testmem:off
   devicehigh=C:\Windows\ramdrive.sys /E 512
The above would add a 512K RAM drive to your system. Note that adding a RAM drive generally causes your CD-ROM to move to a higher drive letter. RAM drives behave just like physical drives except that when you shut your computer off, all data stored on the drive is lost.


Once you have an encrypted drive and/or a RAM drive installed, you can relocate sensitive data to the drives. If using an encrypted drive, you do not need to use JBN2's Secure Mode.

Data To Move to Encrypted Drive:

  • You do not need to move all of JBN2 to the encrypted drive. The program will run more quickly from a physical drive. Instead, move only your own data.

    Close JBN2. Move your JBN2 Config folder to your encrypted drive. Next you must tell JBN2 where to find its Config folder. Right-click on Start and select Explore. Find the Jack B. Nymble v2 shortcut in your Start menu folder, right-click on it, and select Properties. Under Target, add a space and the location of your Config folder. For example:

       c:\JBN2\JBN2.EXE F:\Config
    Note that the encrypted drive must be mounted when you start JBN2. You can disable JBN2's Window|Global Config|Secure Mode.

  • Move your Books folder to your encrypted drive. Update its location in Window|Retrieval Config|Reply Templates Folder.

  • Move your Mail folder to your encrypted drive. Update its location in Window|Retrieval Config|Mail Folder.

  • If not using a RAM drive, or if you require more space, move the Stats Cache folder to the encrypted drive by setting Window|Stats Config|Cache Folder to, for example, F:\SCache. (Be sure to reserve a folder just for the cache - don't place any other files there.) Also set your Global Config|Work Folder to your encrypted drive, F:\TMP for example.

  • Move your PGP keyring files to your encrypted drive. If using PGP 5 or 6, check PGP Keys Preferences for the location of PUBRING.PKR and SECRING.SKR. Move the files and set the preferences accordingly.

    If using PGP 2.6.x, move the files PUBRING.PGP and SECRING.PGP. In PGP's config.txt, add something like the following in the appropriate section:

            PubRing = F:\Keys\pubring.pgp
            SecRing = F:\Keys\secring.pgp
    Note that the encrypted drive must be mounted when you run PGP.



Data To Move To RAM drive:

  • If you are creating text-only messages, you can probably locate JBN2's work folder on your RAM drive, depending on its size. If you send larger messages, you will need a larger RAM drive, or will need to place the work folder on an encrypted drive.

    To move your work folder to your RAM drive, set Global Config|Work Folder. You can also specify a different work folder for some Message Books on the Extra page of each book, for those books which require a larger work folder, for example. Be sure your work folder has ample space.

  • Optionally, set Stats Config|Cache Folder to a dedicated cache folder on your RAM drive. Be sure it has ample space for the web pages you download, and your specified Files To Cache. Be sure to reserve a folder just for the cache - don't place any other files there.


Additional Security Notes

  • PGP is designed for security, but not anonymity. Because of this, some aspects of the program can reveal more about your identity than you might like. For example, if the EncryptToSelf feature is used for anonymous email, you will probably be revealing your identity to anyone who examines the PGP message. (PGP will display what keys a message is encrypted to.) Also, different versions of PGP add different headers to PGP messages, such as Version and Comment headers, and may use different packet formats. For this reason, JBN2 will generally strip off PGP headers to prevent this information being useful in tracking your messages. Even so, some final clearsigned messages, for example, may contain these headers.

    In general, you should turn off EncryptToSelf features in PGP. If using PGP 5 or 6, this is done in PGP's Preferences|Always encrypt to default key. (Also note that each PGP client or plugin you use may have independent settings.) If using PGP 2.6.x, be sure the following are set in PGP's config.txt:

            EncryptToSelf = OFF
            MyName = YouForgotToSpecifySignID
        

1999 PantaRhei.dyndns.org