F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Jan_Rockstedt_4's avatar
Jan_Rockstedt_4
Icon for Nimbostratus rankNimbostratus
Jan 14, 2014

VIP for SMTP to see the real client ip.

Hi all,   We have setup a VIP for port 25 and use the below irule together with data group to restrict the access. But we do not see the real client ip addresses I guess because of SNAT. Any sugge...
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Jan 14, 2014
when CLIENT_ACCEPTED {

    if { [class match IP::addr [IP::client_addr] equals "SMTP_data_group"] }{ 
        pool smtp_inbound 
    } else { 
        TCP::respond "550 message rejected - If you think this is an error report it to Global NOC" TCP::release TCP::close drop return 
    } 
}