For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Harry1's avatar
Harry1
Icon for Nimbostratus rankNimbostratus
Mar 30, 2016

Need to configure VIP to accept smtp connections

Hi ,

i have bigip with LTM and APM configured. want to allow smtp port 25 in LTM from various applications. application server will hit on configured VIP on port 25 and it must be allowed and connected .where and what configuration i need to put ?

 Regards
  Prak  

4 Replies

  • Hi Prak

    You must create a Data Class(class_trusted_clients) and an iRule to filter which IP is allowed to access to SMTP server. Like this:

    when CLIENT_ACCEPTED {
        if {![class match [IP::client_addr] equals class_trusted_clients]}
        { 
            drop
            log local0. "dropped: [IP::client_addr] is trying to access to SMTP"
    }
    
  • Sorry, a close parenthesis "}" is missing.

    when CLIENT_ACCEPTED {
        if {![class match [IP::client_addr] equals class_trusted_clients]}
        { 
            drop
            log local0. "dropped: [IP::client_addr] is trying to access to SMTP"
        }
    }
    
    • Faruk_AYDIN's avatar
      Faruk_AYDIN
      Icon for Altostratus rankAltostratus
      If your exchange clients access to VIP:443, you can create same VIP IP with port 25 as Prak said, and put the iRule to control the traffics