Forum Discussion
bman_12685
Nimbostratus
Nimbostratussmtp irule for access control
Hello,
I am trying to either preserve the source ip information so that existing smtp rules and greylists continue to work but ensure fault tolerance by placing smtp servers befind an f5 vip...
bman_12685Nimbostratus
Nimbostratusactually it looks like it may be working have to test more but for debugging i am doing this variation of it
when RULE_INIT {
debug logging to /var/log/ltm (local0)? 0 = no, 1 = yes
set static::debug 1
}
if { [matchclass [IP::remote_addr] equals smtp_relay_allowed] } {
when CLIENT_ACCEPTED {
if { [IP::addr [IP::remote_addr] equals $ip_of_lb ] } {
log local0. "Node IP address is: [IP::remote_addr] and sent to SMTP_clients_from_ltm_addr"
} else {
log local0. "Node IP address is: [IP::remote_addr]"
if { [class match [IP::client_addr] equals smtp_relay_allowed] } {
pool mail.dcname
} else {
reject
}
}
}