For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

draco's avatar
draco
Icon for Nimbostratus rankNimbostratus
May 10, 2017

SMTP server-real ip with snat

Dear All   I have a query, we are trying to loadbalance smtp server , will be doing snat .We need to see the real ip. so if we are using smtp profile, we wouldnt be able to get the real ip right? ...
application delivery
BIG-IP
LTM
Ryannnnnnnnn's avatar
Ryannnnnnnnn
Icon for Altocumulus rankAltocumulus
May 10, 2017

Unfortunately smtp doesn't support the xff header in the same sense as http does. You could try and do something fancy with the tcp payload, but ultimately it's probably easier to move the gateway for the network and remove snat.

 

Can i ask why you're unable to move the gateway?

 

Ryannnnnnnnn's avatar
Ryannnnnnnnn
Icon for Altocumulus rankAltocumulus
May 10, 2017

Heya,

 

I had a look through that thread and it seems to suggest the same thing (that you need to move the gateway). I think the OP got confused about inserting the client ip as opposed to logging it. Sorry bro.