Forum Discussion
jhanington_1353
May 28, 2014Nimbostratus
Request feedback on my STMP iRule
Long story short, I have been seeing a bunch of brute force SMTP auth attacks on our exchange server. They managed to get a valid username of one of our users so now they are trying a bunch of common...
JG
May 29, 2014Cumulonimbus
But the client can change the string in the initiation string that is supposed to be its domain name anytime it wants, since you effectively have an open relay.
I have been working on an irule that will enforce validation of the domain name in the client initiation string. But I have not yet been able to find a suitable environment to test it properly, or at all at the moment. I will share it once I have tested it to my satisfaction.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects