Forum Discussion
John_Masgalas_4
Nimbostratus
Nimbostratussmtp access control
We are testing prrof of concept of load balancing our smtp servers. It seems to be working fine except that the smtp servers see the bigip IP address instead of the client address. This is due to us u...
kykong_107132Nimbostratus
NimbostratusHi,
you can use match class. create a data group (class) with all the legitimate client IP addresses. using iRule to check if not the IP address within the data group, drop it.
class clientIP{
1.1.1.1
2.2.2.2
3.3.3.3
}
when CLIENT_ACCEPTED {
if { [matchclass [IP::remote_addr] equals $::clientIP] } {
pool smtp_pool
} else {
reject
}
}
regards,
KY
