Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

BAP (Baounc Attack Prevention)

Updated: 17 Sep 2010 | 3 comments
Ashruakkode's picture
0 0 Votes
Login to vote

Dear Adnan

Our oganization is willciing to configure BAP in SBG.

I don't know from where we start it.

Could you please inform the following.

1.What is the BAP
2.What are the precations we have to take before applying this feature.
3.What are the adventages and disadventas of BAP.
4.Others

Best Regards
P T Ashraf

discussion Filed Under:

Comments

AdnanH's picture
15
Mar
2010
0 Votes 0
Login to vote

Hi Ashraf, Bounce Attack

Hi Ashraf,

Bounce Attack Prevention (BAP) feature is described in detail, including instructions on how to configure it, in the topic titled "About defending against bounce attacks" on page 163 in Symantec Brightmail Gateway (SBG) 8.0 Administration Guide.

Regards,

Adnan

Cricket17's picture
16
Mar
2010
0 Votes 0
Login to vote

Things to be considered: 1.

Things to be considered:

1. Do you have 3rd parties sending on your behalf - e.g. have you farmed out marketing e-mails to a 3rd party?  If so, their e-mails won't have the correct BAP data when they bounce back.

2. Do you have more than one control center / Scanner farm?  I've had problems with this & BAP.

AdnanH's picture
16
Mar
2010
0 Votes 0
Login to vote

Use the same seed if you have multiple Control Centers

Good points.

For #2, if you set the same value of "Bounce attack prevention seed" on all the control centers for BAP to work properly as indicated in the Admin Guide:

QUOTE:

Warning: If you are running your inbound and outbound messages on different
Scanners with different Control Centers, repeat steps 1 through 3 for each
Control Center, using the same seed value. This ensures that all inbound and
outbound servers are calculating the same tags for validation.

UNQUOTE:

Can you please share what problems did you have and how were those resolved?

Regards,

Adnan