Email address domain change using irule

Question

Can any one provide inputs that how to write an iRule for the email domain change. No changes required on the sender name.

Example:

Sender email address: support@f5.com

To be changed: support@f5.net

Can this be supported using an iRule.

paulius · Answer

user_1701 I am in agreenment with whisperer that the F5 should not be used for this purpose. This overcomplicates the configuration and when troubleshooting occurs in the future this will most likely be overlooked and cause even further delays when something needs to be fixed as soon as possible. Just because the F5 can do it doesn't mean it should do it. So the source device isn't something that you control or that it is even a mail server? You really need to speak with the end user that wants this adjustment and have them explain why the source device cannot be corrected to show the correct souce email.

whisperer · Answer

This sounds like an issue that the F5 should not be used for... a) train users or fix client systems to use the correct email or b) put in rewrite login at email server you are load balancing to.

whisperer · Answer

It would be best to tell the business or application team that this is not supported 😉 Force them to migrate faster, and I am serious.- There is an option to rewrite domain from F5 generated emails: https://my.f5.com/manage/s/article/K27540405.- However, you are hosting an SMTP Virtual Server and flowing this traffic through the F5 BIG-IP to load balanced backend email servers, right?-- The SMTP service profile is limited in options, mostly focusing on security and protocol enforcement.-- Any attempt to change the domain text in traffic email, would require implementing an SMTP proxy via iRules (https://community.f5.com/t5/technical-forum/irule-based-on-smtp-receiver-domain/td-p/267633) or stream profiles (https://community.f5.com/t5/technical-forum/add-ip-client-for-smtp-in-v13-1-stream-replace-not-working/td-p/240228). If you are using encrypted SMTP, then this becomes even more interesting.This is not trivial, it would be kludgy, and would be a royal PITA to troubleshoot. I would suggest F5 professional services here for CYA in case of any outages due to untested or difficult to test code from this community site. If anyone else knows of an EASY button here, please chime in as I would be intersted.... I think the EASY button would be a) pay for professional services (and the business doesnt like to spend more money, so the migration will be faster, lol) or b) simply tell them you cannot implement this easily without a business risk.

paulius · Answer

user_1701 Is this for emails originating from the F5 or originating from some other device which has traffic traverse the F5 as its gateway to the internet?

user_1701 · Answer

Paulius&nbsp;- Its is orginating from some other device. F5 VIP is used for them to load balance the traffic between mail servers.

Forum Discussion

Email address domain change using irule

6 Replies

The New F5 Certified BIG-IP Administrator Certification Exams Now Live

F5 Academies Are Back – And We’re Coming to a City Near You

Recent Discussions

Creating Client SSL Profile using Certs from a new CA

Azure Virtual Machine Scale Set (VMSS) with F5 LTM

Load Balancing IIS Servers

Long URL Redirecting

WAF with ICAP integration

Related Content

Change cookie domain in HTTP::respond

CSV to Address External Datagroup File

iRules variables in BIG-IP Next: behavior change

Decoding the IPv4 address from the persistence cookie

domain blocking

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS