User manual BARRACUDA SPAM VIRUS FIREWALL V4.1 ADMINISTRATOR GUIDE

[. . . ] Barracuda Spam & Virus Firewall Administrator's Guide Version 4. x Barracuda Networks Inc. Campbell, CA 95008 http://www. barracuda. com Copyright Notice Copyright 2004-2010, Barracuda Networks www. barracuda. com v4. 1-100528-01-0528 All rights reserved. Information in this document is subject to change without notice. Trademarks Barracuda Spam & Virus Firewall is a trademark of Barracuda Networks. All other brand and product names mentioned in this document are registered trademarks or trademarks of their respective holders. 2 Barracuda Spam & Virus Firewall Administrator's Guide Contents Chapter 1 ­ Introduction . [. . . ] See the online help on that page for more details. The quarantine account for all of the linked email addresses will be associated with the first email address. Make sure to also enter the first email address on a separate line as well. In this way, a "catchall" account can be created to receive all quarantined emails from a particular domain. Remote IMAP/POP Accounts The Barracuda Spam & Virus Firewall provides an email-retrieval and forwarding utility which fetches email from remote mail servers and forwards it to your local machine's delivery system. This utility can gather mail from servers supporting POP3 and IMAP and is configured from the ADVANCED > Remote IMAP/POP page. Note that all email will be DELETED from the remote mail server after retrieval by the Barracuda Spam & Virus Firewall. There are two types of operations for each account from which the Remote Accounts utility retrieves mail: Global and User. With the User type, it is assumed that all messages in the user's account are intended for a single recipient. The Global type is used when multiple recipients under the same domain are specified for a particular server account. From the ADVANCED > Remote IMAP/POP page you can specify polling interval, SSL (yes/no), user account passwords and email addresses. Clustering the Barracuda Spam & Virus Firewall Deploying clustered Barracuda Spam & Virus Firewalls is easy - once you configure one of the devices, configuration settings are synchronized across the cluster almost immediately. Clustered systems can be geographically dispersed and do not need to be located on the same network. Every Barracuda Spam & Virus Firewall in a cluster must be the same model (400 and above) and have the same version of firmware installed. Instructions to set up and configure a Barracuda Spam & Virus Firewall cluster, including removing a system from the cluster, are detailed on the ADVANCED > Clustering page. Setting Up Clustered Systems To cluster two Barracuda Spam & Virus Firewalls together, where one system is designated as "Barracuda1" and the other is designated "Barracuda2", do the following: 1. 2. Complete the installation process for each system as described in Install the Barracuda Spam & Virus Firewall, page 28. From the ADVANCED > Task Manager page on the Barracuda1 system, verify that no processes are running. No processes should be running when you add a system to a cluster. Advanced Configuration 67 3. 4. From the ADVANCED > Clustering page on the Barracuda1 system, enter a Shared Secret password for the cluster, and click Save Changes. From the ADVANCED > Clustering page on the Barracuda2 system, do the following: 4a. In the Clustered Systems section, enter the IP address of the Barracuda1 system and click Join Cluster. 5. On each Barracuda system, refresh the ADVANCED > Clustering page, and verify that: · Each system's IP address appears in the Clustered Systems list · The status of each server is green The following example shows two servers in a cluster with a green status. Figure 7. 1: Two Barracuda Spam & Virus Firewall systems in a cluster Make sure each clustered server's IP address appears in this list. Make sure the status of each server is green. 6. Distribute the incoming mail traffic to each Barracuda Spam & Virus Firewall using a Barracuda Load Balancer (preferred) or another load balancing device, or use multiple DNS MX records of equal priority. Each Barracuda Spam & Virus Firewall in a cluster must be on exactly the same firmware version. See the online help on the ADVANCED > Clustering page for instructions in updating the firmware on all systems in the cluster at the same time. 7. Centralized Policy Management With a Quarantine Host You can optionally designate one Barracuda Spam & Virus Firewall as the "host" of the cluster such that all administration of configuration settings and access to per-user quarantine for the cluster can only be accessed and set from that node. This option has two advantages: it provides for additional security by limiting access to administration of the cluster, and it protects the user interface from mail processing load since, with this configuration, you do not direct any email traffic to the host node. If you want to set up one Barracuda Spam & Virus Firewall as the host of the cluster, enter the hostname of that device in the Quarantine Host field on the BASIC > Quarantine page and do not direct any email to that device. 68 Barracuda Spam & Virus Firewall Administrator's Guide Redundancy of user quarantine data on the cluster Each user account has a primary and backup server in the cluster. [. . . ] If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. [. . . ]