BarracudaSpamFirewall: Difference between revisions

From UMIACS
Jump to navigation Jump to search
mNo edit summary
 
(13 intermediate revisions by 4 users not shown)
Line 1: Line 1:
===Introduction===
===Introduction===
 
UMIACS has deployed a system with 2 Barracuda Networks spam firewalls. This allows for enterprise level Virus and Spam scoring and filtering for our email architecture. You can log in to the system either of the 2 firewalls using your UMIACS email address (username@umiacs.umd.edu) and password:
UMIACS has deployed a system with 3 Barracuda Networks spam firewalls. This allows for enterprise level Virus and Spam scoring and filtering for our email architecture.
*[https://bubs.umiacs.umd.edu bubs.umiacs.umd.edu]
*[https://pompom.umiacs.umd.edu pompom.umiacs.umd.edu]


===Mail Flow Through Barracudas===
===Mail Flow Through Barracudas===
*Currently users that receive mail at Exchange or our new IMAP service will be serviced by the Barracudas.  
*The first time your mail flows through one of the Barracudas it will send you a mail with a new username and password. Subsequently you will receive every day (unless you configure otherwise) a mail at approx. 3:30pm EST from the Barracuda with your quarantine summary. '''Please note that auto log-in through the link provided in the summary does not work due to a recent firmware upgrade on the Barracudas. Please use the links provided above to log in.'''


*The first time your mail flows through one of the Barracudas it will send you a mail with a new username and password. Subsequently you will receive every day (unless you configure otherwise) a mail at approx. 3:30 EST from the Barracuda with your quarantine summary.
===Scoring===
The Barracudas will score every message that passes through them and inject varying message headers based on that score. You can then create email filters based on these headers to filter out messages that are tagged as spam by the Barracudas. See [[BarracudaSpamFirewall/Scoring]] for more details.


===Quarantine===
===Quarantine===
*Mail that has been deemed as spam will be kept on the Barracudas in quarantine.  It will not be delivered to your mailbox unless you configure the Barracudas to do so.
*Mail that has been deemed as spam will be kept on the Barracudas in quarantine.  It will not be delivered to your mailbox unless you configure the Barracudas to do so.
*Your quarantine will be preserved for '''21 days'''. If mail is held for longer, then it will be purged. At the bottom of your 3:30 quarantine mail you will see a link that will take you straight to your quarantine.
*Your quarantine will be preserved for '''21 days'''. If mail is held for longer, then it will be purged.
**If you receive a security warning in your browser after clicking this link, you may need to [[AddingUMIACSCertificateAuthority|add the UMIACS Certificate Authority]].
**If you receive a security warning in your browser after clicking this link, you may need to [[AddingUMIACSCertificateAuthority|add the UMIACS Certificate Authority]]
'''Searching Quarantine'''
*You can search your spam quarantine with the following steps [[BarracudaSpamFirewall/SearchingQuarantine]]
*There are two different ways to visit your spam quarantine
 
**'''The first way(Recommended)''' is to go to your UMIACS email and open the message "Spam Quarantine Summary - (#)"  (see picture below)
===Quarantine Passthrough===
***[[Image:q1.jpg|1000px]]
*If you wish to have the mail that would ordinarily be quarantined by Barracuda delivered to your mailbox instead you can configure this using the Barracuda web configuration.
***By default you should receive this e-mail once a day.
*You can enable this functionality with the following guide [[BarracudaSpamFirewall/QuarantinePassthrough]]
***Once you open the email go to the bottom and you should see a link called "View your entire Quarantine Inbox or Manage your preferences." (see picture below)
***[[Image:q2.jpg|1000px]]
***Once you click this link it will automatically bring you to the spam quarantine website and log you in.
**'''The second way''' is to go to either the pompom, homsar, or bubs server. All three of these will bring you to your spam quarantine (it doesn't matter which one you use). These can be found here: [http://pompom.umiacs.umd.edu:8000/cgi-mod/index.cgi pompom], [https://homsar.umiacs.umd.edu/cgi-mod/index.cgi homsar], [https://bubs.umiacs.umd.edu/cgi-mod/index.cgi bubs]
***Login with your UMIACS email account ex: example@umiacs.umd.edu. The password will be the same as your email password (your UNIX password).
*Both of these methods will bring you to a website which will show you your spam quarantine.
*From this you will see a drop-down box that says "select filter" (see picture below)
**[[Image:q3.jpg|1000px]]
**There are three different filters, "from", "subject", and "message". "From" will allow you to search the emails based on who sent them. "Subject" will allow you to search based on the subject of emails. Message will allow you to search in the body of the email. To the right of the filter, you can either select "contains" or "doesn't contain". This will tell the filter to check if something contains the text you search for or doesn't contain the text you search for. For example if your filter is "subject" and you select "contains" and search for "lottery" this will be the result.
*[[Image:q4.jpg|1000px]]
**If your filter is "subject" and you select "doesn't contain" "lottery", all of the emails that don't have "lottery" in the subject will be shown.


===Whitelists, Blacklists & Bayesian Filtering===
===Whitelists, Blacklists & Bayesian Filtering===

Latest revision as of 19:16, 20 September 2021

Introduction

UMIACS has deployed a system with 2 Barracuda Networks spam firewalls. This allows for enterprise level Virus and Spam scoring and filtering for our email architecture. You can log in to the system either of the 2 firewalls using your UMIACS email address (username@umiacs.umd.edu) and password:

Mail Flow Through Barracudas

  • The first time your mail flows through one of the Barracudas it will send you a mail with a new username and password. Subsequently you will receive every day (unless you configure otherwise) a mail at approx. 3:30pm EST from the Barracuda with your quarantine summary. Please note that auto log-in through the link provided in the summary does not work due to a recent firmware upgrade on the Barracudas. Please use the links provided above to log in.

Scoring

The Barracudas will score every message that passes through them and inject varying message headers based on that score. You can then create email filters based on these headers to filter out messages that are tagged as spam by the Barracudas. See BarracudaSpamFirewall/Scoring for more details.

Quarantine

  • Mail that has been deemed as spam will be kept on the Barracudas in quarantine. It will not be delivered to your mailbox unless you configure the Barracudas to do so.
  • Your quarantine will be preserved for 21 days. If mail is held for longer, then it will be purged.
  • You can search your spam quarantine with the following steps BarracudaSpamFirewall/SearchingQuarantine

Quarantine Passthrough

  • If you wish to have the mail that would ordinarily be quarantined by Barracuda delivered to your mailbox instead you can configure this using the Barracuda web configuration.
  • You can enable this functionality with the following guide BarracudaSpamFirewall/QuarantinePassthrough

Whitelists, Blacklists & Bayesian Filtering

  • You may also setup whitelists, blacklists, and Bayesian filtering options through the Preferences tab at the top of the Barracuda web portal.

More Information

  • For more information on how to use the Barracuda please download the user's guide:

https://wiki.umiacs.umd.edu/umiacs/images/5/5a/Barracuda_usersguide.pdf