Been using them since they first came to market.

Spam is a non-ending escalation.  You and Cuda adjust and block, they adjust 
and get past it. It is a detail orientated battle, you have to dig into the 
details of where it is coming from and go after it that way.  For example this 
summer SoftLayer's network was hitting us with about 5,000 messages a day.  
Moving to new subnets every day.  Looking at it I found a common theme on the 
rDNS for the sources and put a regex block on them.

You are going to have to dig in and find the common thread on these messages 
and adjust.  Considering you are seeing a 5000 per day increase in messages I 
would say you will find it pretty quick.  It's one out of control spammer 
nailing you.

From: [email protected] [mailto:[email protected]] On 
Behalf Of Jake Gardner
Sent: Friday, December 18, 2015 9:38 AM
To: [email protected]
Subject: [NTSysADM] Barracuda Spam fw appliance

Does anyone here use one?  We have a model 300 and lately we are getting 
absolutely hammered with SPAM that the 'cuda just won't catch.

I have opened a few tickets with them about the issue and all they say is that 
my firewall is blocking the 'cuda from checking websites.  I've checked my 
firewall and I don't see any blocks and the 'cuda is in a policy with no  
outbound restrictions.

The only thing that seems to slow it down is rate control.  I turned it down to 
20/30mins.   In the last 9 hours it controlled 3700 and only outright blocked 
1450.    We see about 17k messages a day on average.  A couple months again we 
were averaging 12k.


Thanks,

Jake Gardner
IT Administrator
267-352-2020 Ext. 246
www.ttcdas.com<http://www.ttcdas.com/>



***Teletronics Technology Corporation***
This e-mail is confidential and may also be privileged. If you are not the 
addressee or authorized by the addressee to receive this e-mail, you may not 
disclose, copy, distribute, or use this e-mail. If you have received this 
e-mail in error, please notify the sender immediately by reply e-mail or by 
telephone at 267-352-2020 and destroy this message and any copies.

Thank you.

*******************************************************************
  

Reply via email to