For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hung_105573's avatar
hung_105573
Icon for Nimbostratus rankNimbostratus
Oct 18, 2012

SNAT for Mail Server

Hi all

 

i'm new f5 , my F5 is gateway internet for end users and server inside , i must how to config to Server mail go to oubound internet via one in 3 ip public mx record ?

 

I have 3 line internet , on line 1 have 1 ip public mx ,line 2 have 1 ip public mx , line 3 have 1 ip public mx

 

pls help me , config snat for mail server ?

 

thanks all

 

 

 

config
design

3 Replies

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Oct 18, 2012
    Are you load balancing outbound? Or would you like or need to? Or is using just one link OK? How is the link selected?
  • hung_105573's avatar
    hung_105573
    Icon for Nimbostratus rankNimbostratus
    Oct 18, 2012

    Hi

     

    i have config loadbalance outbound

     

    i have irule this apply under virtual server 0.0.0.0/0.0.0.0 port 25 outbound , but some time end users can not send mail via por 25 .( the users must double send may be send ) and i saw source ip of end user can not tranlation to ip public in snat pool Nat_internet_live.

     

    my irule

     

    when CLIENT_ACCEPTED {

     

    if { [IP::addr [IP::client_addr] equals 10.0.25.91] } {

     

    snatpool NAT_MAILServer

     

    }

     

    else

     

    {

     

    snatpool Nat_Internet_live

     

    }

     

    }

     

    the ip 10.0.25.91 is mail server

     

    snatpool Nat_mailserver have 3 ip public ( mx record)

     

    snatpool Nat_internet_live have 3 ip public for end users go to internet

     

     

    pls help me , is it config true ?

     

    thanks all

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Oct 18, 2012
    The iRule looks good. Can you post the VS and SNAT Pool configurations (with sensitive information masked of course)?