Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 957
  • Last Modified:

barracuda

hi
i ahve a static ip from isp where all emails are processing using smtp solution,and now i got a barracuda firewall spam filter,and this  has an ip that i filled in,i spoke to the barracuda support and they told me to speak to your isp to point to this ip instead of the static ip of isp..
do i need to send a dns request to the isp and tell them that i need to swap from one to another or pointing to the barracuda ip,and this ip is not public
i dont want to do this until i ask you ?
any help please
0
asaidi
Asked:
asaidi
  • 4
  • 4
1 Solution
 
r-kCommented:
Does the barracuda have its own static public IP? or is it assigned a private IP?

If it's a public facing static IP then all you should have to do is to ask your ISP to change the MX record for your domain to point to the Barracuda's IP instead of your mail server's IP.

If the barracuda is sharing an IP then you have to set up port forwarding to forward mails to the Barracuda instead of the to the mail server, this si something you would do rather than the ISP.

You also have to configure the Barracuda to send the filtetered mails on to your mail server. See this quick start quide:

 http://www.barracudanetworks.com/ns/downloads/barracuda_spam_quickstart.pdf

And there are other documents at: http://www.barracudanetworks.com/ns/support/documentation.php
0
 
asaidiAuthor Commented:
thank you for your answer:
i have two others questions :
1-port forwarding i must do it in my router but which service i must choose?
2-if i want to put my internal ip to be in the internet like this i can change my mx record how i can do it

Thank you
0
 
Cyclops3590Commented:
1) forward port 25/tcp.  you need to map the public IP to the internal port and make sure to allow 25/tcp port as well for the public ip
2) you use the public ip that is mapped to the internal ip of the barracuda.  find the people that host your domain's zone.  have them add an 'A' record that resolves to the public ip of the barracuda, then have them change the mx record to point to this A record
0
New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

 
asaidiAuthor Commented:
Hi

Thank you very much for your answer..
i spoke to my isp to get another public ip and she told me that she will take the ip already had and she will give me two ips..
my question is how i can tell them to make one for my smtp and after that the first ip(smtp) must point the second ip that i will put for my barracuda spam filter is this correct or there is another way to say it?
0
 
Cyclops3590Commented:
???
you mean one maps to the barracuda and the other is for everything else?

just decide which public IP you want to map to the barracuda, modify your firewall/router appropriately to accomplish this NAT, and update your DNS entries to reflect this IP by doing what was already stated above about the MX and A records
0
 
asaidiAuthor Commented:
yes
mean if i have two public ips
then one normally for smtp (emails) ..like what i have now,i have only one static ip given by my isp..
and i asked them to add me the second ip (public) that i want to use for barracuda,then i must tell them that the first one must point my barracuda ip,and i will put the barracuda ip on my dns of mail server
is that correct?
0
 
Cyclops3590Commented:
you can do anything you want with your IPs.  but the dns entries a  separate issue of the same project for this.

1) Pick IP to be mapped to barracuda
2) Configure firewall to map that IP to the barracuda
3) Test it out to ensure smtp traffic goes thru the firewall to it
4) Add an 'A' record filter.example.com to point to the IP
5) Make sure this A record works first
6) After 'A' record is confirmed, have them change the MX records so it points to the fqdn of the barracuda.

I believe that's all the required.  r-k, can add to it if I did miss anything. After all of this you may want to get a PTR record created as well, an IP-to-fqdn mapping, setup with your ISP, but one thing at a time.
0
 
asaidiAuthor Commented:
hi
thank you very much and sorry about the delay i was not in the office:
then what i understood:i will have two public ips:one for internet and mail (smtp) and one i will put it on barracuda ..
then i ask them to change the mx record from the 1 st ip to the barracuda ip..that is?
and please can you tell me what is A record..?

Thank you
0
 
Cyclops3590Commented:
An 'A' record is a record within your Forward DNS zone mapping a fqdn (fully-qualified domain name) to an IP Address.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now