Forum Discussion

MCP200_297965's avatar
MCP200_297965
Icon for Nimbostratus rankNimbostratus
Nov 14, 2017

SMTP Public VIP Configuration

Hi There,

 

I hope someone could advise on the below implementation please. I have a requirement to setup external VIP with a public ip address on the F5 for SMTP load balancing which will be used to forward all emails to Symantec Message Lab.

 

No Natting will be done on the firewall at all, the firewall is configured to accept traffic on port 25 coming from Syamntec to our public ip address and the public ip address is configured direcly on the LTM VIP. Symantec Message lab will Then be configured to accept connections for Inbound/ outbound mail from the VIPs ip address.

 

On the external VIP, do i need automap nat? Do I need specific iRules? Does the exchange require to see the smtp traffic coming from the VIPs public ip address? or the selfip? Should this implementation be done manually or using iAPPs

 

application delivery
LTM
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Nov 15, 2017

    Do your Exchange servers make any decisions about SMTP traffic based on the incoming IP address?

     

    Do your Exchange servers have a default gateway of the F5?

     

    If you can answer yes to those questions, then you do not need to use a SNAT/SNAT automap setting, and the Exchange servers will see the real IP address of the incoming connection.

     

    Otherwise, you will probably need to use a SNAT/SNAT automap, and the Exchange servers will see the traffic coming from the assigned SNAT IP/floating Self-IP address.

     

    You should not need any irules, and I would build the virtual manually.