For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tosneyp_93777's avatar
tosneyp_93777
Icon for Nimbostratus rankNimbostratus
Jun 23, 2011

Exchange 2010 SMTP Virtual Server Forward to smarthost

Hi,     I'm new to this forum and also new to the wonderful World of F5 - so please go easy on me should I ask anything stupidily obvious! ;)     The reason I'm posting is to see if anyone...
microsoft
partner
Mike_McCracken_'s avatar
Mike_McCracken_
Icon for Nimbostratus rankNimbostratus
Jul 21, 2011
Did you get this working?

 

 

We have a similar situation where our ingress mail (Internet resolved MX) points to messagelabs.com. Traffic is subsequently forwarded to our location, through our edge firewall (and NAT'd - public IP to private) to a private F5 VIP IP (with two backend Exchange mail edge servers in a pool).

 

 

Additionally, we need to have our egress mail traffic (that is sourced from the two edge pool members) reverse-proxy back through the same VIP IP address (currently used for ingress traffic).

 

 

Our thinking was to create a SNAT similar to the one below and assign it to the appropriate F5 based VLAN:

 

 

snat mail-snat {

 

translation 10.225.18.41

 

origins {

 

10.19.154.36

 

10.19.154.37

 

}

 

vlans dmz enable

 

}

 

 

For some reason, the traffic isnt using the SNAT (egress): as the traffic leaves our network, it is using the edge firewall based NAT Overload address instead of the static one-to-one NAT currently inplace for ingress traffic.

 

 

Thoughts?