Forum Discussion

Jan_Rockstedt_4's avatar
Jan_Rockstedt_4
Icon for Nimbostratus rankNimbostratus
Jan 14, 2014

VIP for SMTP to see the real client ip.

Hi all,   We have setup a VIP for port 25 and use the below irule together with data group to restrict the access. But we do not see the real client ip addresses I guess because of SNAT. Any sugge...
Jan_Rockstedt_4's avatar
Jan_Rockstedt_4
Icon for Nimbostratus rankNimbostratus
Jan 14, 2014

The internal routing will be fixed be our internal routers and send to the F5, as the internal serves do not have the F5 as the default gateway.

 

But the SNAT is stripping off the client IP to the servers, as it should do. It would be nice to have a SMTP x-forward. :-) I was reading about this problem for other users and some sugestions was using NAT instead of SNAT. Any sugestion for a new irule or NAT? We need to see the client ip addresses on the servers for security resonds.

 

//Jan