Barracuda Networks 4 Guide d'installation

1Barracuda Networks Inc.385 Ravendale DriveMountain View, CA 94043http://www.barracudanetworks.comVersion Barracuda Spam Firewall Administrator’s Guid

10 Barracuda Spam Firewall Administrator’s GuideOverviewThe Barracuda Spam Firewall is an integrated hardware and software solution that provides

100 Barracuda Spam Firewall Administrator’s GuideEnabling SSLAdvanced > SSL allows you to enable SSL on your Barracuda Spam Firewall. Click Sa

Advanced Administration 101SSL Certificate ConfigurationCertificate Type Select one of the following certificates for SSL:• Default (Barracuda Netw

102 Barracuda Spam Firewall Administrator’s GuideDetecting Spam in Chinese and Japanese MessagesAdvanced > Regional Settings allows you to enh

Advanced Administration 103The following table describes the settings on the Advanced > Bounce/NDR Messages page.The following table describes t

104 Barracuda Spam Firewall Administrator’s GuideTroubleshootingAdvanced > Troubleshooting provides various tools that help troubleshoot netwo

Advanced Administration 105Generating System ReportsThe Barracuda Spam Firewall has a variety of system reports that can help you keep track of suc

106 Barracuda Spam Firewall Administrator’s GuideAutomating the Delivery of Daily System ReportsThe Daily Report Email Options section lets you c

Advanced Administration 107Example ReportThe following example shows a Top Spam Senders report in a vertical bars format.Enabling SMTP over TLS/SSL

108 Barracuda Spam Firewall Administrator’s GuideUsing the Task Manager to Monitor System TasksAdvanced > Task Manager provides a list of task

Advanced Administration 109Tasks to Perform Before Rebooting in Recovery ModeBefore you use the diagnostic and recovery tools, perform the followin

Introduction 11Energize Updates provide your Barracuda Spam Firewall with the following benefits: • Access to known offending IP addresses• Known s

110 Barracuda Spam Firewall Administrator’s GuideTable 7.22: Reboot Option DescriptionBarracuda Starts the Barracuda Spam Firewall in the normal

Outbound 111Chapter 8OutboundThis chapter describes the additional features that are provided when your Barracuda Spam Firewall is configured for out

112 Barracuda Spam Firewall Administrator’s GuideAbout Outbound ModeOutbound Mode ensures that all e-mail leaving your network is virus-free and

Outbound 113Viewing Outbound Messages in the Message LogIf your Barracuda Spam Firewall is configured for outbound mode, the Basic > Message log

114 Barracuda Spam Firewall Administrator’s GuideSpecifying Allowed SendersBasic > Allowed Senders allows you to control which messages are al

Outbound 115Specifying Allowed Senders Using SMTP AuthenticationInstead of specifying the IP addresses or domains that can send messages through yo

116 Barracuda Spam Firewall Administrator’s GuideEnabling Intent Analysis and Spam ScoringBy default, intent analysis and spam scoring are disabl

Outbound 117Managing the Quarantine BoxWhen the Barracuda Spam Firewall detects a virus in an outgoing message, that message is automatically place

118 Barracuda Spam Firewall Administrator’s GuideAfter viewing the messages in the quarantine inbox you may decide to remove the message from the

Outbound 119Adding a Relay ServerAdvanced > Relay allows you to add relay servers or 'smart hosts' for certain domains. Adding a relay

12 Barracuda Spam Firewall Administrator’s GuideInbound and Outbound ModesThe Barracuda Spam Firewall can be configured in one of the following t

120 Barracuda Spam Firewall Administrator’s GuideSetting Up Subject and Body FilteringYou can use compliance buttons to filter information contai

Managing Your Quarantine Inbox 121Chapter 9Managing Your Quarantine InboxThis chapter describes how you can check your quarantined messages, classify

122 Barracuda Spam Firewall Administrator’s GuideQuarantine Summary ReportThe Barracuda Spam Firewall sends you a daily quarantine summary report

Managing Your Quarantine Inbox 1232.Enter your username and password, and click Login.Your login information resides in the greeting message sent t

124 Barracuda Spam Firewall Administrator’s GuideChanging your User PreferencesAfter logging into your quarantine interface, you can use the Pref

Managing Your Quarantine Inbox 125Enabling and Disabling Spam Scanning of your EmailIf you do not want the Barracuda Spam Firewall scanning your e-

126 Barracuda Spam Firewall Administrator’s GuideAdding Email Addresses and Domains to Your Whitelist and BlacklistPreferences > Whitelist/Bla

Managing Your Quarantine Inbox 127Changing the Language of the Quarantine InterfaceYou can change the language of your quarantine interface by sele

128 Barracuda Spam Firewall Administrator’s Guide

Regular Expressions 129Appendix 1Regular ExpressionsThe Barracuda Spam Firewall allows you to use regular expressions in many of its features. Regula

Introduction 13Barracuda Spam Firewall ModelsThe Barracuda Spam Firewall comes in a variety of models. Refer to the following table for the capacit

130 Barracuda Spam Firewall Administrator’s GuideUsing Special Characters in ExpressionsThe following characters have a special meaning in regula

Regular Expressions 131\*FREE\* *FREE*\*FREE\* V.*GRA *FREE* VIAGRA, *FREE* VEHICLEGRA, etcTable 1.3: Regular ExpressionsExample Matches...

132 Barracuda Spam Firewall Administrator’s Guide

133Appendix 2Limited Warranty and LicensingBarracuda Networks, Inc., or the Barracuda Networks, Inc. subsidiary or authorized Distributor selling th

134 Barracuda Spam Firewall Administrator’s GuideExclusions and RestrictionsThis limited warranty does not apply to Barracuda Networks products t

135GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION0. This License applies to any program or other work

136 Barracuda Spam Firewall Administrator’s GuideThis section is intended to make thoroughly clear what is believed to be a consequence of the re

Compliance 137Appendix 3 ComplianceNotice for the USACompliance Information Statement (Declaration of Conformity Procedure) DoC FCC Part 15: This

138 Barracuda Spam Firewall Administrator’s Guide

Index - 139AAccount View page 69accountsactivating for individuals 86creating 69deleting 69editing 71overriding settings 73activating individual accou

14 Barracuda Spam Firewall Administrator’s GuideLocating Information in this Document• This section lists the topics associated with each page in

140 - Eeditingaccounts 71domains 76emailrouting 31servers 75statistics 37email aliases, unifying 78Email Protocol page 83email protocol settings (outb

Index - 141outbound mode 12about 112configuring 33features 111Outbound Relay page 93Outlook plug-in 54overridingaccount settings 73quarantining settin

142 - UUDP ports 27unifying email aliases 78un-whitelist 42updatingfirmware 29Use MX Records field 76user preferences, changing 124user settingsrestor

Introduction 15Block/Accept TabThe following table lists the topics associated with each page on the Block/Accept tab. Users TabThe following table

16 Barracuda Spam Firewall Administrator’s GuideAdvanced TabThe following table lists the topics associated with each page on the Advanced tab.Ta

Introduction 17Reporting Generating System Reports on page 105SMTP / TLS Enabling SMTP over TLS/SSL on page 107Task Manager Using the Task Manag

18 Barracuda Spam Firewall Administrator’s Guide

Pre-installation 19Chapter 2Pre-installationThis chapter provides an overview of the Barracuda Spam Firewall deployment issues that you must consider

2 Spam Firewall Administrator’s GuideCopyright NoticeCopyright 2005, Barracuda Networkswww.barracudanetworks.comv3.2.22All rights reserved. Use o

20 Barracuda Spam Firewall Installation GuideDeployment TypesWhen deciding how best to deploy your Barracuda IM Firewall, consider both the capab

Pre-installation 21Standard Network Configuration DeploymentStandard Network Configuration requires all Internet requests to pass through the Barra

22 Barracuda Spam Firewall Installation GuideISP Installation DeploymentThis deployment type is typically used by Internet Service Providers. The

Pre-installation 23High Availability DeploymentThe High Availability deployment is configured in two separate networks and these networks are then

24 Barracuda Spam Firewall Installation Guide

Setup 25Chapter 3SetupThis chapter covers:Installation Examples ... 32Barracuda

26 Barracuda Spam Firewall Administrator’s Guide• Ethernet cables• Mounting rails (models 600, 800, and 900 only)• VGA monitor (recommended)• PS2

Setup 27Step 3. Configure the System IP Address and Network SettingsThe Barracuda Spam Firewall is given a default IP address of 192.168.200.200. Y

28 Barracuda Spam Firewall Administrator’s GuideStep 5. Configure the Barracuda Spam FirewallAfter specifying the IP address of the system and op

Setup 294.Click Save Changes. If you changed the IP address of your Barracuda Spam Firewall, you are disconnected from the administration interface

iiiContentsChapter 1 – Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 9Overview . . . . . . . . . . . . . . . . . .

30 Barracuda Spam Firewall Administrator’s GuideSpam Firewall receives the latest virus and spam updates from Barracuda Central. The Energize Upd

Setup 31Step 8. Route Incoming Email to the Barracuda Spam FirewallThe next step in setting up your Barracuda Spam Firewall is to route incoming e-

32 Barracuda Spam Firewall Administrator’s GuideThe following table describes the most common tasks you should perform when first tuning your sys

Setup 33• Forward (port redirection) incoming SMTP traffic on port 25 to the Barracuda Spam Firewall at 10.10.10.3. • Configure the Barracuda Spam

34 Barracuda Spam Firewall Administrator’s GuideOutbound Mode Configuration ProcessYour Barracuda Spam Firewall can only operate in one of these

Setup 35Lotus Domino Server http://www-12.lotus.com/ldd/doc/domino_notes/Rnext/help6_admin.nsf/f4b82fbb75e942a6852566ac0037f284/14cdfeaa188fa90a852

36 Barracuda Spam Firewall Administrator’s Guide

Basic Tab 37Chapter 4Basic TabThis chapter covers basic administration tasks, most of which can be performed from the BASIC tab.Monitoring System Sta

38 Barracuda Spam Firewall Administrator’s GuidePerformance StatisticsThe following table describes the system environmental conditions displayed

Basic Tab 39The firmware and mail/log storage shows the percent of space used on each partition. The Barracuda Spam Firewall e-mails a system alert

iv Barracuda Spam Firewall Administrator’s GuideChapter 4 – Basic Tab . . . . . . . . . . . . . . . . . . . . . . . . . . 37Monitoring System Sta

40 Barracuda Spam Firewall Administrator’s GuideThe following figure displays the location of each of the lights.The following table describes ea

Basic Tab 41Legend1. Slider bar lets you select the time frame of the message log.2. Preferences button lets you customize the message log display.

42 Barracuda Spam Firewall Administrator’s GuideTable 4.4: Button DescriptionSpam Classifies the message as spam in the Bayesian database. The Ba

Basic Tab 43Overview of the Message LogThe following table describes each column displayed in the message log table.Changing the Viewing Preference

44 Barracuda Spam Firewall Administrator’s Guide• Show messages from the local Barracuda Spam Firewall only (clustered environments).The default

Basic Tab 45Specifying the Subject Text and Priority of Tagged MessagesBasic > Spam Scoring allows you enter the text that appears at the beginn

46 Barracuda Spam Firewall Administrator’s GuideEnabling and Disabling Virus Checking and NotificationVirus scanning is automatically enabled on

Basic Tab 471.Enable quarantine using the Spam Scoring Limits on the BASIC-->Spam Scoring page. For more information, refer to Configuring the G

48 Barracuda Spam Firewall Administrator’s GuideSpecifying the Global Quarantine SettingsThe following table describes the global quarantine conf

Basic Tab 49Configuring System IP InformationBasic > IP Configuration contains the network and mail server configuration for your Barracuda Spa

vSubject Line Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65Body Filter. . . . . . .

50 Barracuda Spam Firewall Administrator’s GuideTCP/IP Configuration The IP address, subnet mask, and default gateway of the Barracuda Spam Firew

Basic Tab 51Controlling Access to the Administration InterfaceThis section covers the following tasks you can perform from the BASIC-->Administr

52 Barracuda Spam Firewall Administrator’s Guide• To add an individual IP address (instead of an entire network), use a netmask of 255.255.255.25

Basic Tab 53Resetting the System Using the Front PanelPressing the Reset button located on the front panel of the Barracuda Spam Firewall does the

54 Barracuda Spam Firewall Administrator’s GuideTo change the mode of your Barracuda Spam Firewall:1. Go to the BASIC-->Administration page.2.

Basic Tab 55Using the Microsoft Outlook and Lotus Notes Plug-inAfter downloading and installing the plug-in, users can begin classifying messages u

56 Barracuda Spam Firewall Administrator’s GuideSending Spam Messages to Barracuda Networks • When you classify messages as spam in the Message L

Basic Tab 57Reducing BackscatterBy default, your Barracuda Spam Firewall is configured to send a bounce notification (also known as a non-delivery

58 Barracuda Spam Firewall Administrator’s Guide

Using the Block and Accept Filters 59Chapter 5Using the Block and Accept FiltersThe Block/Accept tab provides a wide range of filters that enhance th

vi Barracuda Spam Firewall Administrator’s GuideGenerating System Reports. . . . . . . . . . . . . . . . . . . . . . . .

60 Barracuda Spam Firewall Administrator’s GuideThe following table describes each of the blacklist settings on the Block/Accept > External Bl

Using the Block and Accept Filters 61What Happens if your Domain or IP Address is on a BlacklistIf your domain or IP address is on a blacklist that

62 Barracuda Spam Firewall Administrator’s GuideSender Domain FiltersSender Domain Block/Accept allows you to filter messages based on the sender

Using the Block and Accept Filters 63Sender Email Address FilterEmail Sender Block/Accept allows you to filter messages based on the sender’s e-mai

64 Barracuda Spam Firewall Administrator’s GuideThe following table describes the filters on this page.Attachment Type FilterAttachment Filtering

Using the Block and Accept Filters 65Subject Line FilterSubject Filtering allows you to filter messages based on the contents of a message’s subjec

66 Barracuda Spam Firewall Administrator’s GuideNote the following about content filtering:• You can enter multiple lines for each filter, but ea

Using the Block and Accept Filters 67The following table describes the parameters on this page. Click Save Changes after making any changes.Note th

68 Barracuda Spam Firewall Administrator’s Guide

Managing Accounts and Domains 69Chapter 6Managing Accounts and DomainsThis chapter covers the following tasks that you can perform from the Users and

viiAppendix 2 – Limited Warranty and Licensing 133Exclusive Remedy. . . . . . . . . . . . . . . . . . . . . . . . . . . .

70 Barracuda Spam Firewall Administrator’s Guide• Edit a user’s account settings by logging in to their quarantine interface• Delete user account

Managing Accounts and Domains 71Editing User AccountsIn some cases you may need to edit the settings of a specific user account to:• Check the mess

72 Barracuda Spam Firewall Administrator’s GuideRemoving Invalid User AccountsFrom the Users > Accounts View page you can remove existing user

Managing Accounts and Domains 73Overriding the Quarantine Settings for Specific User AccountsThe only time you should need to use the Users > Us

74 Barracuda Spam Firewall Administrator’s GuideExampleOne of the most common scenarios for overriding quarantine settings is when you want to pr

Managing Accounts and Domains 75• Download Backup File to save the last backup file to a specified location.• Create Backup File Now to create a ne

76 Barracuda Spam Firewall Administrator’s Guide4.Configure the domain settings, as described in Editing Domain Settings on page 76.Editing Doma

Managing Accounts and Domains 773.Click Save Changes.Using LDAP to Authenticate Message RecipientsThis section describes how to configure your Barr

78 Barracuda Spam Firewall Administrator’s GuideTable 6.5: LDAP Server The name of your LDAP server to use for authenticating message recipients.

Managing Accounts and Domains 79SMTP over TLS/SSL settings If SMTP over TLS/SSL is enabled then passwords will not be sent in clear text if both se

viii Barracuda Spam Firewall Administrator’s Guide

80 Barracuda Spam Firewall Administrator’s Guide4.Click Save Changes.Impact of a Down LDAP ServerIf your LDAP server goes down for any reason, yo

Managing Accounts and Domains 81Lotus Domino receiving messages for two domainsIf your Lotus Domino server receives messages for two domains, but t

82 Barracuda Spam Firewall Administrator’s Guide

Advanced Administration 83Chapter 7Advanced AdministrationThis chapter covers the following tasks that you can perform from the ADVANCED tab:Modifyin

84 Barracuda Spam Firewall Administrator’s GuideEnforce RFC 821 Compliance Whether the Barracuda Spam Firewall requires that the SMTP "MAIL

Advanced Administration 85Configuring Message Rate ControlRate Controls allows you to configure how many connections are allowed from the same IP a

86 Barracuda Spam Firewall Administrator’s GuideActivating Individual AccountsWhen you first start using the Barracuda Spam Firewall you may pref

Advanced Administration 87The following information is not included in the desktop or automated backup:• System password• System IP information•DNS

88 Barracuda Spam Firewall Administrator’s GuideRestoring from a Backup FileTo restore system configuration from a backup file:1. Go to the Confi

Advanced Administration 893. If you are restoring configuration on a replacement Barracuda Spam Firewall, update the following:• Virus and spam def

Introduction 9Chapter 1IntroductionThis chapter provides an overview of the Barracuda Spam Firewall and includes the following topics:Overview ...

90 Barracuda Spam Firewall Administrator’s GuideVirus Definition UpdatesThe following table describes the Virus Definition Updates fields on the

Advanced Administration 91The only time you should revert back to an old firmware version is if you recently downloaded a new version that is causi

92 Barracuda Spam Firewall Administrator’s GuideUsing a Syslog Server to Centrally Manage System LogsAdvanced > Syslog allows you to specify a

Advanced Administration 93Setting up Trusted Relays and SASL/SMTP AuthenticationAdvanced > Outbound/Relay allows you to setup basic relaying fun

94 Barracuda Spam Firewall Administrator’s GuideCustomizing the Outbound FooterBy default, the Barracuda Spam Firewall adds a footer to all outbo

Advanced Administration 95Configuring the Network Interfaces on Models 600 and AboveIf you have a Barracuda Spam Firewall 600 or above you can conf

96 Barracuda Spam Firewall Administrator’s Guide4.From the Advanced > Clustering page on the Barracuda2 system, do the following:4a. Enter the

Advanced Administration 97Each user account has a primary and backup server in the cluster. The primary is the server that first joins the cluster,

98 Barracuda Spam Firewall Administrator’s GuideImpact of Changing the IP Address of a Clustered SystemIf your Barracuda Spam Firewall is running

Advanced Administration 99Implementing Single Sign-onAdvanced > Single Sign-On allows you to configure the Barracuda Spam Firewall to authorize