For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

markn11_229516's avatar
markn11_229516
Icon for Nimbostratus rankNimbostratus
Feb 13, 2016

Prevent open mail relay

We're currently running F5 LTM (11.6) for our Exchange 2013 environment. We have Source Address Translation set to Automap. We have servers set to point to the VIP, and we are allowing the Self-IP on...
application delivery
LTM
markn11_229516's avatar
markn11_229516
Icon for Nimbostratus rankNimbostratus
Feb 15, 2016

I tried to copy and paste the code you sent, but my F5 didn't like it. Not sure if I'm not running the right code.

 

I was able to get it to work by using this as an iRule. It works if I use client_addr or remote_addr. Not sure if one is preferred over the other. Do you think this is acceptable?

 

when CLIENT_ACCEPTED { set accepted_snat "10.10.10.100"

 

if { [ class exists SMTP_EXCHANGE_SERVERS ] } { if { [class match [IP::client_addr] equals SMTP_EXCHANGE_SERVERS] } { snat $accepted_snat } else { snat automap } } else { snat automap } }