SMTP relay

Hi Russell,

I am guessing that you want to restrict them by IP Address or Subnet? You could use a matchclass if you are using BIG-IP v9.x.x or earlier class match if you are using v10.0.0 or later.

You simply create an iRule Datagroup and allow or deny based on the contents of the Datagroup.

Example:

when CLIENT_ACCEPTED {
   if { [class match [IP::client_addr] equals allowednetworks] } {
       pool matching.pool.name
   }
}

Hope this helps.

the question i have for this , is how to test this? I have implemented a simliar ruleset along with first setting the smtp proxy, yet a manual test by telneting to port 25 is rejected as such im hesitant to put this rule into production.

 

 

ideas?

I replied to your other post.

 

 

Aaron

Any easy way to test instead of the reject command you can log if you would have rejected the traffic. If you keep the rules on the servers durning this time you should have a list of what the LTM would have rejected.