Forum Discussion
CirrostratusF5 and anti-spam
MVPI don't think so. The only feature that can help a little is the ip intelligence as it will block bad source ip addresses from bad domains.
https://clouddocs.f5.com/api/irules/IP-reputation.html
F5 had a MSM module but that was a long time ago:
https://www.f5.com/content/dam/f5/corp/global/pdf/white-papers/msm-wp.pdf
THE_BLUEDear Nikoolayy1,
the ip intelligence is already activated and I'm looking for extra layer. thanks a lot.
- Nikoolayy1
If don't want to buy another device you may consider SMTP relay services like SendGrid etc. that are cloud based offerings. Symantec even has Email Security.cloud but from F5 point I think that they have given up on this market :
- Nikoolayy1
Also I just renembered that you can use the URLDB for the SWG module to filter based on FQDN/Domain names:
https://devcentral.f5.com/s/question/0D51T00008GXZw0/is-there-f5-ip-intelligence-based-on-domainfqdn-domain-intelligence
Still you will need to see if you can do this for the SMTP traffic and it will be hard work and maybe not worth the efford:
https://devcentral.f5.com/s/articles/smtp-filter-and-forward-proxy
- THE_BLUE
So is that mean, i can create data group contains all blacklist domain then create irule to check the blacklist domains and it will be assigned to email VS ?!
how to write the irule ?
