Barracuda Networks Inc., the worldwide leader in email and Web security appliances, recently announced a new feature in the Barracuda Spam Firewall that can differentiate legitimate Non-Delivery Report (NDR) messages – also known as bounce messages – from invalid NDR messages resulting from spoofing attacks. Using [tag]Invalid Bounce Suppression[/tag], the [tag]Barracuda Spam Firewall[/tag] prevents “backscatter” messages from reaching innocent email senders.
“Backscatter is an unfortunate side effect of the continued prevalence of email spoofing by spam campaigns that is now plaguing corporate email servers,” said Stephen Pao, vice president of product management for Barracuda Networks. “It is also a frustrating, and sometimes confusing, problem for email users who are the innocent victims.”
Backscatter occurs when spammers, hackers or other users with malicious intent, spoof the email addresses of legitimate email users to send spam, viruses or worms. The receiving email server typically rejects the email and sends an NDR message to the spoofed email address. As a result, the legitimate email user receives a bounce message for emails that they never sent.
“While one common technique to minimize the impact of backscatter is to simply define policies to block all incoming bounce messages, doing so can result in the blocking of legitimate bounce messages,” said Pao. “As such, distinguishing legitimate from invalid bounce messages can be extremely important to users who send business-critical email.”
Invalid Bounce Suppression tags the sender addresses of all outgoing messages sent from the Barracuda Spam Firewall’s outbound relay, or through the Barracuda Spam Firewall-Outbound appliance. The tags are encoded with built-in expiration periods and encrypted to prevent forgery. When an NDR message is received by the Barracuda Spam Firewall, a valid tag must be present in the bounce recipient address (i.e., the original sender address) for the bounce message to be delivered. If the bounce recipient address does not contain a tag or if a tag is invalid, the NDR message is rejected. Usage of the Invalid Bounce Suppression feature is transparent to legitimate senders and recipients.
“Beyond the reputation benefits of preventing spam and viruses from leaving an organization’s network, Invalid Bounce Suppression has a direct impact on reducing the amount of unwanted email that hits users’ email inboxes,” added Pao. “Invalid Bounce Suppression provides another compelling reason why organizations should also consider relaying their outbound email through an email security solution, such as the Barracuda Spam Firewall or Barracuda Spam Firewall-Outbound.”
In addition to Invalid Bounce Suppression, the latest Barracuda Spam Firewall version also includes additional rules governing email policy, including new policy rules for character sets used in emails and attachments, reverse DNS resolutions of sending email servers, and full URLs (including query strings) embedded in emails.
Pricing and Availability:
The latest features, including Invalid Bounce Suppression, are available with Barracuda Spam Firewall firmware release 3.5.12 and above. The Barracuda Spam Firewall is available in eight models with prices starting at $899. International pricing and availability varies based on region.
About the Barracuda Spam Firewall:
The Barracuda Spam Firewall is available in eight models and supports up to 100,000 active users with no per user licensing fees. Its architecture leverages 12 defense layers: denial of service and security protection, rate control, IP analysis, sender authentication, recipient verification, virus protection, policy (user-specified rules), Fingerprint Analysis, Intent Analysis, Image Analysis, Bayesian Analysis, and a Spam Rules Scoring engine. In addition, the entire Barracuda Spam Firewall line features simultaneous inbound and outbound email filtering with the inclusion of sophisticated outbound email filtering techniques, such as rate controls, domain restrictions, user authentication (SASL), keyword and attachment blocking, triple-layer virus blocking, and remote user support for outbound email filtering. The Barracuda Spam Firewall’s layered approach minimizes the processing of each email, which yields the performance required to process millions of messages per day.
For more information on the Barracuda Spam Firewall, visit http://www.BarracudaNetworks.ca/spam-firewall.aspx.
Popularity: 38% [?]
