{"id":984,"date":"2011-07-26T09:14:03","date_gmt":"2011-07-26T09:14:03","guid":{"rendered":"http:\/\/gigihfordanama.wordpress.com\/?p=984"},"modified":"2012-08-08T00:09:43","modified_gmt":"2012-08-08T00:09:43","slug":"review-spam-filter-virus-firewall-barracuda-200-appliance","status":"publish","type":"post","link":"https:\/\/dosen.unila.ac.id\/gigih\/2011\/07\/26\/review-spam-filter-virus-firewall-barracuda-200-appliance\/","title":{"rendered":"Review Spam Filter & Virus Firewall Barracuda 200 Appliance"},"content":{"rendered":"

Akhirnya beres juga otak atik Barracuda Appliance untuk anti spam dan virus firewall seri 200. Already running untuk filtering\u00a0 spam dan virus layanan email Civitas Akademika Unila.\u00a0 Barang ini datang kemarin sore dan baru diujicobakan hari ini dengan penampakan fisik seperti dibawah .<\/p>\n

\"\"<\/a><\/p>\n

Dipasaran baracuda tipe 200 ini dibundle dari harga $2000 hingga $2500 atau sekitar 20an – 25an juta (wow cukup mahal sodara-sodara),\u00a0 berhubung uang UNILA jadi gak usah mikirin harga mahal yang penting worth-it dengan kegunaannya, barang ini sengaja dipesan untuk memperpanjang umur hidup para “admin”<\/strong> supaya juragan network tidak stress berhadapan dengan yang namanya spam dan virus email \ud83d\ude00\u00a0 . dibawah saya copas info dari official site barracuda untuk fungsi seri 200.<\/p>\n

Description:<\/strong> The Barracuda Spam & Virus Firewall 200 is an integrated hardware and software solution designed to protect your email server from spam, virus, spoofing, phishing and spyware attacks. It leverages 12 comprehensive defense layers to provide industry-leading defense capabilities for any email server within a business environment. The Barracuda Spam & Virus Firewall 200 is designed for businesses with up to 500 active email users. The Barracuda Spam & Virus Firewall 200 protects your email server by providing the following: Anti-spam, Anti-virus, Anti-spoofing, Anti-phishing, Anti-spyware (attachments), Denial of Service.<\/em><\/p>\n

Cukup sekilas intermezzo dari Barracuda 200 Appliance ini, lanjut ke bagaimana kita memfungsikan alat ini sebagai device filtering\/scanning\/firewalling seluruh email email domain yang kita kelola. Saya ambil kasus yang terjadi pada Universitas Lampung, sebut saja ada 4 domain email utama yang aktif digunakan untuk melayani transaksi email segenap Civitas Akademika Unila.<\/div>\n
\n
    \n
  1. Server maiser.unila.ac.id (handle account dosen: *@unila.ac.id).<\/li>\n
  2. Server students.unila.ac.id (handle account mahasiswa : *@students.unila.ac.id).<\/li>\n
  3. Server groups.unila.ac.id (handle milis dan email admin: *@groups.unila.ac.id \/ *@unila.ac.id).<\/li>\n
  4. Server staff.unila.ac.id (handle email staff: *@dosen.unila.ac.id).<\/li>\n<\/ol>\n<\/div>\n
    Agar Si Barracuda 200 ini bisa bekerja sebagai mailscanner untuk ke empat domain yang saya sebutkan tadi, maka kita perlu merubah\/mengarahkan MX (Mail Exchanger)\u00a0 domain tersebut\u00a0 defaultnya adalah ke address barracuda appliance yg akan kita deploy.<\/div>\n

    Untuk kasus saya Barracuda akan saya set berada di belakang DMZ Server dengan IP Private 192.168.1.252\/24 hal ini dilakukan untuk\u00a0 menyesuaikan existing topologi mail server lainnya dengan rincian IP Address sebagai berikut;<\/p>\n

      \n
    1. Server maiser.unila.ac.id IP:192.168.1.2\/24<\/li>\n
    2. Server students.unila.ac.id IP:192.168.1.26\/24<\/li>\n
    3. Server groups.unila.ac.id IP:192.168.1.116\/24<\/li>\n
    4. Server staff.unila.ac.id IP:192.168.1.25\/24<\/li>\n<\/ol>\n

      Setelah barracuda diberi IP maka perlu dibuat rule mapping ke ip public di DMZ-GW agar barakuda \u00a0bisa reachable ke internet,\u00a0 untuk keperluan registrasi, simplenya di FreeBSD aktifkan BINAT dari dan menuju kealamat barakuda, dan pastikan juga dari barakuda sudah bisa melakukan query traceroute ke domain internet.<\/p>\n

      Langkah berikutnya buatlah agar default MX dari masing masing domain sudah mengarah ke IP barakuda.<\/p>\n

      ns1# nslookup\n> set type=any\n> server 192.168.1.8\nDefault server: 192.168.1.8\nAddress: 192.168.1.8#53\n\n> barracuda.unila.ac.id\nServer:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.8\nAddress:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.8#53\n\nName:\u00a0\u00a0 barracuda.unila.ac.id\nAddress: 103.3.46.252\nbarracuda.unila.ac.id\u00a0\u00a0 mail exchanger = 10 barracuda.unila.ac.id.\nbarracuda.unila.ac.id\u00a0\u00a0 mail exchanger = 300 mailgate.unila.ac.id.\nbarracuda.unila.ac.id\u00a0\u00a0 text = \"google-site-verification=vPuONHfguQTTnn4bpwN1zgwzB7GL996UWjbaJdNX-c8\"\nbarracuda.unila.ac.id\u00a0\u00a0 has AAAA address 2001:470:18:aa7::2\n\n> students.unila.ac.id\nServer:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.8\nName:\u00a0\u00a0 students.unila.ac.id\nAddress: 103.3.46.6\nstudents.unila.ac.id\u00a0\u00a0\u00a0 mail exchanger = 10 barracuda.unila.ac.id.<\/strong>\n> unila.ac.id\nServer:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.8\nunila.ac.id\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 origin = ns1.unila.ac.id\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mail addr = admin.unila.ac.id\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 serial = 2011031969\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 refresh = 3600\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 retry = 900\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 expire = 3600000\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 minimum = 3600\nunila.ac.id\u00a0\u00a0\u00a0\u00a0 nameserver = ns2.unila.ac.id.\nunila.ac.id\u00a0\u00a0\u00a0\u00a0 nameserver = ns3.unila.ac.id.\nunila.ac.id\u00a0\u00a0\u00a0\u00a0 nameserver = ns1.unila.ac.id.\nunila.ac.id\u00a0\u00a0\u00a0\u00a0 mail exchanger = 10 barracuda.unila.ac.id.<\/strong>\nunila.ac.id\u00a0\u00a0\u00a0\u00a0 mail exchanger = 20 mailgate.unila.ac.id.\nName:\u00a0\u00a0 unila.ac.id\nAddress: 103.3.46.1\nunila.ac.id\u00a0\u00a0\u00a0\u00a0 has AAAA address 2001:470:18:aa7::2\n\n> staff.unila.ac.id\nServer:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.8\nName:\u00a0\u00a0 staff.unila.ac.id\nAddress: 103.3.46.100\nstaff.unila.ac.id\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mail exchanger = 10 barracuda.unila.ac.id.<\/strong>\n\n> groups.unila.ac.id\nServer:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 192.168.1.8\ngroups.unila.ac.id\u00a0\u00a0\u00a0\u00a0\u00a0 mail exchanger = 10 barracuda.unila.ac.id.\ngroups.unila.ac.id\u00a0\u00a0\u00a0\u00a0\u00a0 mail exchanger = 20 groups.unila.ac.id.\nName:\u00a0\u00a0 groups.unila.ac.id\nAddress: 103.3.46.1<\/pre>\n
      OK setelah dipastikan bahwa default MX ditiap domain diforward ke barracuda,\u00a0 selanjutkan kita aktifkan fitur mailscan untuk ke tiap-tiap domain.<\/p>\n
      \"\"<\/a>(Tampilan utama Aplikasi Barracuda web console)<\/p>\n
      \"\"<\/a>(Buat 4 domain yang ingin kita tambahkan)<\/p>\n
      \"\"<\/a>(Report Statistik email tiap domain yang sudah dibuat)<\/p>\n
      \"\"<\/a>(Tambahkan mail relay untuk 4 server tadi)<\/p>\n
      \"\"<\/a>(Edit domain manajemen email, dan pastikan ke IP berapa next forwarding mail setelah dilakukan pengecekan oleh si Barracuda, dan ingat harus IPADDRESS yah bukan DOMAIN<\/strong>)<\/p>\n
      \"\"<\/a><\/p>\n
      (Kita Bisa melihat transaksi email secara realtime dalam bentuk grafik)<\/p>\n
      \"\"<\/a>(Terakhir check header email apakah tiap mail masuk sudah mendapat stamp scanning dari barracuda)<\/p>\n
      Finish, tinggal rajin rajin lihat reportnya apakah banyak spam dan virus terblokir.<\/p>\n
      We WILL See……… :-p\u00a0\u00a0\u00a0 how strong this appliance<\/strong><\/em><\/p>\n
      \n","protected":false},"excerpt":{"rendered":"
      Akhirnya beres juga otak atik Barracuda Appliance untuk anti spam dan virus firewall seri 200. Already running untuk filtering\u00a0 spam dan virus layanan email Civitas Akademika Unila.\u00a0 Barang ini datang kemarin sore dan baru diujicobakan hari ini dengan penampakan fisik seperti dibawah . Dipasaran baracuda tipe 200 ini dibundle dari harga $2000 hingga $2500 atau … Continue reading “Review Spam Filter & Virus Firewall Barracuda 200 Appliance”<\/span><\/a><\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1348,9],"tags":[116,117,238,420,429,569,623,1005,1092,1243],"class_list":["post-984","post","type-post","status-publish","format-standard","hentry","category-kiat-sukses-menjadi-seorang-network-engineer-2","category-world-of-ict","tag-barracuda-anti-spam","tag-barracuda-anti-virus","tag-configuration-barracuda","tag-how-to-configure-barracuda","tag-how-to-setting-barracuda","tag-konfigurasi-barracuda","tag-manual-guide-barracuda","tag-review-spam-filter-virus-firewall-barracuda-200-appliance","tag-spam-filter-with-barracuda","tag-virus-filter-with-barracuda"],"_links":{"self":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts\/984"}],"collection":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/comments?post=984"}],"version-history":[{"count":0,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/posts\/984\/revisions"}],"wp:attachment":[{"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/media?parent=984"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/categories?post=984"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dosen.unila.ac.id\/gigih\/wp-json\/wp\/v2\/tags?post=984"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}