Messaging Gateway

 View Only
  • 1.  BAP (Baounc Attack Prevention)

    Posted Mar 14, 2010 03:39 AM


    Dear Adnan

    Our oganization is willciing to configure BAP in SBG.

    I don't know from where we start it.

    Could you please inform the following.

    1.What is the BAP
    2.What are the precations we have to take before applying this feature.
    3.What are the adventages and disadventas of BAP.
    4.Others


    Best Regards
    P T Ashraf




  • 2.  RE: BAP (Baounc Attack Prevention)

    Posted Mar 15, 2010 12:37 PM
    Hi Ashraf,

    Bounce Attack Prevention (BAP) feature is described in detail, including instructions on how to configure it, in the topic titled "About defending against bounce attacks" on page 163 in Symantec Brightmail Gateway (SBG) 8.0 Administration Guide.

    Regards,

    Adnan


  • 3.  RE: BAP (Baounc Attack Prevention)

    Posted Mar 16, 2010 12:15 PM

    Things to be considered:

    1. Do you have 3rd parties sending on your behalf - e.g. have you farmed out marketing e-mails to a 3rd party?  If so, their e-mails won't have the correct BAP data when they bounce back.

    2. Do you have more than one control center / Scanner farm?  I've had problems with this & BAP.



  • 4.  RE: BAP (Baounc Attack Prevention)

    Posted Mar 16, 2010 01:17 PM

    Good points.

    For #2, if you set the same value of "Bounce attack prevention seed" on all the control centers for BAP to work properly as indicated in the Admin Guide:

    QUOTE:

    Warning: If you are running your inbound and outbound messages on different
    Scanners with different Control Centers, repeat steps 1 through 3 for each
    Control Center, using the same seed value. This ensures that all inbound and
    outbound servers are calculating the same tags for validation.

    UNQUOTE:

    Can you please share what problems did you have and how were those resolved?

    Regards,

    Adnan