Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

kraigk_52257's avatar
kraigk_52257
Icon for Nimbostratus rankNimbostratus
Jul 24, 2010

Forwarding from one VIP to another

I'm trying to get all my smtp traffic coming in to one VIP to get routed/forwarded to another. I had a simple iRule that did this but it didn't really work as the traffic went from a VIP requiring authentication to another that did not creating an open relay. Here is the flow:

 

 

Current

 

Client --> SMTP_VIP_with_Auth --> Hub_Transport_VIP --> delivery to mailbox

 

 

Desired

 

Client --> SMTP_VIP_with_Auth --> SPAM_Firewall_VIP --> Hub_Transport_VIP --> delivery to mailbox

 

 

How to get that extra hop in there?

 

 

 

4 Replies

  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Jul 25, 2010
    Hi Kraigk,

     

    Have you taken a look at the following?

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/virtual.html

     

     

     

    CB
  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Jul 25, 2010
    Hi Kraigk,

     

    Have you taken a look at the following?

     

     

    http://devcentral.f5.com/wiki/default.aspx/iRules/virtual.html

     

     

     

    Bhattman
  • kraigk_52257's avatar
    kraigk_52257
    Icon for Nimbostratus rankNimbostratus
    Jul 25, 2010
    Wow that was easy. Thank you very much Bhattman. I really appreciate this.
  • kraigk_52257's avatar
    kraigk_52257
    Icon for Nimbostratus rankNimbostratus
    Jul 26, 2010
    I'm trying to figure out a related problem.. The VIP I have doing authenticated smtp on port 25 works fine with this iRule: 

    
when CLIENT_ACCEPTED {
   Send request to a new virtual server
  virtual SMTP-VIP
}

    This gets my mail routed from one VIP to another.

    I'm having trouble with the above on my SSL VIP for port 465. It works but only for NTLM authentication and I don't want to tell hundreds of clients to change their configs to NTLM. Any ideas? I've tried when SERVER_CONNECTED and the client can send mail but the iRule doesn't forward to the next VIP.

    thanks.