For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nacho_de_Aguina's avatar
Nacho_de_Aguina
Icon for Nimbostratus rankNimbostratus
Jan 19, 2007

SNAT Pass the source IP to the sever

Hello:     I have a Virtual Server, of SMTP protocol.   The problem is that in the log mail servers i see that all the connections are from the VS, and i cannot see the IP of the client.   ...
application delivery
dev
devops
iRules
AaronJB's avatar
AaronJB
Ret. Employee
Jan 22, 2007
Do you have a case number where that information was given, Nacho? If appropriate that's something I'd like to chase up internally.

 

 

 

For SMTP I don't think it's going to be possible to pass the original client IP across in an iRule as there really isn't anywhere to put it.

 

 

For HTTP is possible because (as others have said) you can insert the IP into a header which you then configure the webserver to log, however SMTP doesn't have the concept of headers in the same way.

 

 

There is a possibility that I can see here:

 

 

If it's possible to configure your mailserver to log part of the actual message headers, rather than just the TCP connection details, it might be possible to insert an additional SMTP mail header (like an 'X-OriginalClient:' header).

 

 

However that ability would depend on what your MTA is and the iRule could well be quite complex (I can also see the potential to trip over the 4Mb data-collection limit in iRules).

 

 

--

 

Aaron