Haven't played with a Barracuda yet, so I wasn't sure what it could do... Sounds like you need to set up a separate SMTP server like MS SMTP for your users to send through. Then you can lock it down to only allow your users send through it.
Darin. ----- Original Message ----- From: "Grant Griffith - IMail" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, March 11, 2005 11:57 AM Subject: RE: [IMail Forum] Need Help Preventing Connections I wish I could do that, but the Barracuda is not intended or able to send messages thru. It is only to receive emails from other email servers. I am thinking there is not much I can do from here. The only MX record I have goes to my Barracuda, but my users use the generic mail.domain.com and spammers are using that which bypasses the Barracuda. Maybe I can use a rule or Declude filter to check to see if a user either authenticates or is from the barracuda, otherwise reject the message. Thanks, Grant Griffith EI8HT LEGS, A Division of ETC (877)483-3393 (812)933-5390 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, March 11, 2005 11:29 AM To: [email protected] Subject: Re: [IMail Forum] Need Help Preventing Connections Oh, I think I'm understanding more... you also want external MXs to send through the barracuda instead of connecting directly to the IMail server. To do that, you need remove the IMail server from the MX records in your DNS. Your MX records should instead point to the Barracuda. You can still have a hostname that your users use to SMTP directly to the IMail server, but you may want to change the IP and/or hostname to keep spammers that have cached your MX from still being able to send to you. It might be simpler, though, just to send everything through the barracuda, and have users retrieve from IMail, but send through the barracuda. You then gain some additional protection if a user misbehaves or is hacked, and the setup is a little simpler with the barracuda for all SMTP and the IMail for all POP. Darin. ----- Original Message ----- From: "Grant Griffith - IMail" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, March 11, 2005 11:06 AM Subject: RE: [IMail Forum] Need Help Preventing Connections I don't need the barracuda in the relay for addresses area, I have been running it for a while without that. I have been running relay for Addresses for ever. I guess what I am wanting to do may not be possible. Basically I am wanting to force everyone EXCEPT the barracuda to authenticate before connection to my Imail server. If they can not authenticate, then they should be sending the message to the Barracuda first to be processed there. Here is what I am trying to stop. I want to stop these spam servers from connecting directly to my Imail box and bypassing my Barracuda. We are beginning to see allot of this type of traffic lately and I need to find a way to stop it. Thanks, Grant Griffith EI8HT LEGS, A Division of ETC (877)483-3393 (812)933-5390 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Friday, March 11, 2005 10:53 AM To: [email protected] Subject: RE: [IMail Forum] Need Help Preventing Connections Don't use the Control Access. What you did means "Don't accept CONNECTIONS from anyone except the barracuda". What you want to do us use "Relay for Addresses" and put the IP of the barracuda in there. That setting means "Relay for anyone who authenticates AND this list of IP addresses". -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith - IMail Sent: Friday, March 11, 2005 10:38 AM To: [email protected] Subject: RE: [IMail Forum] Need Help Preventing Connections Well Darin, I just tried it by putting my Barracuda in the Control Access and denying everyone else and it will not allow me to send email by authenticating. Anyone else have any ideas? Thanks, Grant Griffith EI8HT LEGS, A Division of ETC (877)483-3393 (812)933-5390 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, March 11, 2005 9:58 AM To: [email protected] Subject: Re: [IMail Forum] Need Help Preventing Connections You got it exactly. Put the IP of your Barracuda in the allow list. Users who authenticate can always send, regardless of any other SMTP security you have in place. Darin. ----- Original Message ----- From: "Grant Griffith - IMail" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, March 11, 2005 8:32 AM Subject: [IMail Forum] Need Help Preventing Connections Hey All, We have a Barracuda Firewall in front of our Imail server and I want to setup Imail so that only Authenticated users and the Barracuda can connect to Imail and send messages. How do I go about setting this up in Imail? Do I need to Deny Access to everyone except my barracuda in the Control Access area in SMTP security? Does that still allow my users to authenticate and send messages? Thanks all for any help. I am just trying to stop all the DOS Attacks we have been getting. Thanks, Grant Griffith EI8HT LEGS, A Division of ETC (877)483-3393 (812)933-5390 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
