SolvedPrivate

Barracuda antispam

Posted on 2016-08-22
6
87 Views
Last Modified: 2016-08-31
Hello Experts,

I am having issue at my site that users can not send ZIP files or receive zip files from outside. I use barracuda antispam in the network, is there any way to check what settings I can change to make this work.

Thanks,
0
Comment
Question by:Zak
6 Comments
 
LVL 37

Expert Comment

by:bbao
ID: 41765799
what's the error message do you see from the email client side and Exchange server logs?

you may also check or post the email header of the non-delivery message, if any.

the email header should have the info showing how the message was processed step by step, and the ZIP blocker should be in one of the steps. locate it and trace back to the corresponding module and configure it.
0
 

Author Comment

by:Zak
ID: 41765817
I read the error: and it says our antispam gave this error: MS-OFFICE file containing VBA macros found inside of the email.

can you help?
0
 

Author Comment

by:Zak
ID: 41765839
I have two issues one with ZIP files sending or receiving and the other is emails with VBA contents.

The example above is with vba contents in an email and the non-delivery report was sent to me by the party trying to email me .
0
 
LVL 80

Expert Comment

by:David Johnson, CD, MVP
ID: 41770887
MS-OFFICE file containing VBA macros found inside of the email. Major cause of ransomware are vba macros
1
 
LVL 63

Accepted Solution

by:
btan earned 500 total points
ID: 41771239
For ZIP and VBA files, they will be scanned for blocked extensions if you have enabled the Block Extensions in Archives option on the Block/Accept > Attachment Filtering page. Also see
Please note that even if you allow a specific attachment type (i.e. zip attachments) by not entering the file type in Block/Accept > Attachment Blocking, the virus scanner on your Barracuda Spam Firewall will still scan the attachment and block as necessary. You can confirm you currently have virus scanning enabled by navigating to Basic > Virus Scanning. Detected viruses will not be quarantined or delivered to the intended recipient - even if the message has been whitelisted by a Block/Accept filter.
https://www.barracuda.com/support/knowledgebase/50160000000H4fA

All messages, except those from whitelisted senders, go through attachment filtering. From the BLOCK/ACCEPT > Attachment Filters page you can choose to take certain actions with inbound and/or outbound messages if they contain attachments with certain filename patterns, file types, MIME types, or password protected archives. Actions you can take with inbound messages include block or quarantine. Actions you can take with outbound messages include block, quarantine, encrypt or redirect.
 https://campus.barracuda.com/product/emailsecuritygateway/article/BSF/ContentAnalysisInbound/?welcome-to-campus=techlibrary

In short, you likely have to do whitelisting of sender as doing a wide allow for these file indirectly may also invite infected attachment esp those which bypass AV scan. Active script is not advocated to allow. Otherwise also advise user to have their Windows machine turn on Applocker for whitelisting of application allow to run.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
Encryption for Business Encryption (https://en.wikipedia.org/wiki/Encryption) ensures the safety of our data when sending emails. In most cases, to read an encrypted email you must enter a secret key that will enable you to decrypt the email. T…
In this video we show how to create a User Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Mailb…
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question