For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Alexander_Slink's avatar
Alexander_Slink
Icon for Altostratus rankAltostratus
Apr 20, 2017

APM email agent and VFRY command.

Hello everyone! In our environment we have smtp server on which blocked VRFY command and F5 device on which configured APM policy with email agent. F5 device can not sends messages using VRFY command...
application delivery
BIG-IP Access Policy Manager (APM)
JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Oct 10, 2017

I verified I'm having this same issue. is the VRFY a new thing that it does in 13.0?

 

Nevermind: I found the bug: https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/related/relnote-supplement-hotfix-bigip-13-0-0.htmlA652146-1

 

652146-1 : Email agent does not send email if the remote server does not provide a 200 OK response to VRFY request. Component: Access Policy Manager

 

Symptoms: Access Policy Email Agent does not send email if the remote server does not provide a 200 OK response to VRFY request.

 

Conditions: The version of CURL included in 13.0.0 uses VRFY requests to confirm recipients are valid before sending mail. Many servers consider VRFY a potential leak of information and will respond "252 - Not verified" and the BIG-IP system will not send the message.

 

Impact: The Access Policy Email Agent does not send mail messages or log an error about mail not being sent.

 

Workaround: None.