For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

markn11_229516's avatar
markn11_229516
Icon for Nimbostratus rankNimbostratus
Feb 13, 2016

Prevent open mail relay

We're currently running F5 LTM (11.6) for our Exchange 2013 environment. We have Source Address Translation set to Automap. We have servers set to point to the VIP, and we are allowing the Self-IP on...
application delivery
LTM
Janek_42109's avatar
Janek_42109
Icon for Nimbostratus rankNimbostratus
Feb 15, 2016

Hello,

You can create an irule like this where SMTP_EXCHANGE_SERVERS is a Data Group List of Address

when CLIENT_ACCEPTED {
   if { not [matchclass [IP::remote_addr] equals SMTP_EXCHANGE_SERVERS] } {
   TCP::respond "554 Denied.\r\n"      
   TCP::close
   }

I hope it helped