For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MartinS's avatar
MartinS
Icon for Nimbostratus rankNimbostratus
Jan 22, 2019

Bypass SMTP profile for one IP

Hello, Can you help me with irule which would bypass LTM SMTP profile for one specific ip address? I begin with   when CLIENT_ACCEPTED { if { ([IP::client_addr] == "192.168.5.6%3") }{   and no...
iRules
LTM
profiles
security
smtp
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 23, 2019

Hi Martin,

there exists unfortunately no command to detach an assigned SMTP profile. But you may try the iRule below to disable the PSM functionality of the SMTP via the 

[PSM::SMTP::disable]
command.

https://support.f5.com/csp/article/K10987

Note: The documentation of this command is not maintained anymore, so I dont know if this still works out on latest builds...

when CLIENT_ACCEPTED { 
    if { [IP::addr [IP::client_addr] equals "10.10.10.0/24"] } then {
        PSM::SMTP::disable
    }
}

If this iRule does not workout, you may deploy a front-ending VS wich parses the connecting client IPs and then forwards the request either to a SMTP profile enabled VS or a nacked VS in a VIP-targeting-VIP setup...

https://devcentral.f5.com/wiki/iRules.virtual.ashx

Cheers, Kai