benjamin_gate's avatar
benjamin_gate
Icon for Altostratus rankAltostratus
Nov 30, 2017

Hi James, Yep! That's now working. Thanks. I have another question though.

 

Background * I've built my vSrv using your iApp to do SSL bridging on port 25 for four Exchange nodes (scenario 3 in your Deployment guide for this iApp).

 

  • In order to not have it as an open relay, I followed this article.

     

  • N.B. In order to add this iRule, I turned off strict edits on the iApp.

     

  • The gist of how I added the explicit SNAT IP was to create a floating self-ip (because I have an HA pair) in the same range as my Exchange nodes, locked down to TCP port 25.

     

  • Then in my iRule I used my own name for the data list of IPs and edited the iRule accordingly.

     

  • I've built my receive connector on my Exchange nodes to accept network connections only from that floating self-ip (shown as green in diagram in the article)

     

Question

 

  • My Exchange nodes are not coming online. No matter what monitor type I use - and I've left it with the 'No authentication, no message submitted' monitor - What am I missing?

On another SMTP vSrv I built using the SMTP iApp for my internal relay that has no SMTP encryption (scenario 1 on your Deployment guide), & without using the article cited above, and just having an open relay for internal servers, with the IPs of all F5 self-IPs in the Exchange receive connectors, the monitors come up.