For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

user_1701's avatar
user_1701
Icon for Nimbostratus rankNimbostratus
Jun 11, 2023

Email address domain change using irule

Can any one provide inputs that how to write an iRule for the email domain change. No changes required on the sender name. Example: Sender email address: support@f5.com To be changed: support@f5.n...
devops
user_1701's avatar
user_1701
Icon for Nimbostratus rankNimbostratus
Jun 12, 2023

whisperer Paulius - Yes. Thats right. Currently thers is an ongoing migration for changing it permanently on the mail server. Until it's completed we need interim solution in F5 to get the domain changed.

whisperer's avatar
whisperer
Icon for MVP rankMVP
Jun 12, 2023

It would be best to tell the business or application team that this is not supported 😉 Force them to migrate faster, and I am serious.

- There is an option to rewrite domain from F5 generated emails: https://my.f5.com/manage/s/article/K27540405.
- However, you are hosting an SMTP Virtual Server and flowing this traffic through the F5 BIG-IP to load balanced backend email servers, right?
-- The SMTP service profile is limited in options, mostly focusing on security and protocol enforcement.
-- Any attempt to change the domain text in traffic email, would require implementing an SMTP proxy via iRules (https://community.f5.com/t5/technical-forum/irule-based-on-smtp-receiver-domain/td-p/267633) or stream profiles (https://community.f5.com/t5/technical-forum/add-ip-client-for-smtp-in-v13-1-stream-replace-not-working/td-p/240228). If you are using encrypted SMTP, then this becomes even more interesting.

This is not trivial, it would be kludgy, and would be a royal PITA to troubleshoot. I would suggest F5 professional services here for CYA in case of any outages due to untested or difficult to test code from this community site. If anyone else knows of an EASY button here, please chime in as I would be intersted.... I think the EASY button would be a) pay for professional services (and the business doesnt like to spend more money, so the migration will be faster, lol) or b) simply tell them you cannot implement this easily without a business risk.