STARTTLS Server SMTP with cleartext and STARTTLS client support

Problem this snippet solves: We were looking at our O365 security score and our SMTP scores were pretty sad, so I looked at how I could create a STARTTLS connection up to O365 regardless of the clie...
Published May 02, 2019
Version 1.0
devops
iRules
LTM
smtp
AP's avatar
AP
Icon for Nimbostratus rankNimbostratus
Sep 17, 2019

Hi Sam,

 

I'm about to try implementing the SMTP iApp to achieve what your iRule is doing. Having now stumbled upon your article, my question is, does the iApp not provide this functionality? Did you try the iApp and failed to get your scenario working?

 

According to the documentation it appears the iApp should achieve this. I just took a look at the magic piece of the iApp (the SMTPS profile) and it seems to provide the configuration options for the opportunistic STARTTLS (i.e. STARTTLS Activation mode = None | Allow | Require)

 

Thanks,

Andrew