Forum Discussion

Alain_Trembley_'s avatar
Alain_Trembley_
Icon for Nimbostratus rankNimbostratus
Jan 29, 2015

F5 APM - SMTPS virtual server

Hello,

 

I have APM Virtual Edition (Only, i don't have LTM) I want to use it for SMTP connections, i created a virtual server on port 25 with a pool to the SMTP server and it's working; but i have some problems :

 

-How can i use SMTPS? I give the virtual server Client and Server SSL Profile and choose an SMTPS Profile but it don't work.

 

-I want to use APM policy to filter client's subnet, as soon as i assign an http policy (needed to be able to assign an Access Profile) i can't assign the SMTPS profile anymore.

 

BIG-IP Access Policy Manager (APM)
deployment
security

1 Reply

  • Michael__'s avatar
    Michael__
    Icon for Nimbostratus rankNimbostratus
    Jan 29, 2015
    How can i allow SMTP and SMTPS on the same port (25)? As soon as i give the virtual server an SSL Profile i can't connect SMTP with telnet anymore.

    I dont think that will work on the same port.

    Same problem to use APM policy (I want to filter clients subnet), as soon as i assign 
an http policy (needed to be able to assign an Access Profile) i can't access the SMTP anymore.

    To keep it easy you could just use an irule and a datagroup to filter the subnets.

    Something like:

    when CLIENT_ACCEPTED {
    if { not[class match [IP::client_addr] equals DATAGROUPNAME] } {
        log local0. "[IP::client_addr]:[TCP::client_port]: Rejecting client IP"
        reject
    } 
}