Forum Discussion

Jon_Schultz_196's avatar
Jon_Schultz_196
Icon for Nimbostratus rankNimbostratus
Jan 16, 2017

SMTP Relay to 365

I cannot find any references to what we are trying to accomplish. We are looking to decommission our Ironports and intend to use our F5 LTMs as a proxy to relay mail to 365. Anyone have an iRule to accomplish this? Obviously since Microsoft uses multiple IP addresses, we cannot set up a traditional pool and load balance. Hoping there is an iRule that takes port 25 traffic and relays it via iRule to a url.

 

3 Replies

  • You can use FQDN in the pool member, from 11.6.0:

     

    https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnote-ltm-11-6-0.html

     

    "Populate pools by FQDN

     

    This release includes the ability to configure a BIG-IP system with nodes and pool members that are identified with fully-qualified domain names (FQDNs). When configuring pool members with FQDN, addresses dynamically follow DNS changes. Fully dynamic DNS-managed pools may even be created."

     

    I have never used, but should work fine. Don't forget to configure DNS servers in the F5s.

     

  • Hi Leonardo, thank you for your answer in this post.

     

    Can you share how to config SMTP Relay with Office 365 platform?

     

    Thank you so much.

     

    • Leonardo_Souza's avatar
      Leonardo_Souza
      Icon for Cirrocumulus rankCirrocumulus

      I did not find any deployment guide for that. As SMTP is a standard, I would say that the configuration should be the same as for any other SMTP server.

       

      The only thing I found is to add F5 in the middle, to add SSL layer:

       

      https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-12-0-0/16.html

       

      Anyway, you need first to decide why you want to have F5 doing the SNMP relay. Basically, what functionality you are adding with F5, like SSL, load balancing, etc...

       

      Some things may already exist. For example, I would assume Microsoft already provides SMTPS. Their SMTP servers are load balanced for sure. So, in those cases, there is zero value to add F5 there.

       

      F5 has SMTP and SMTPS profiles, SMTP monitors. It can definitely handle SMTP traffic, you just need to understand what you want it to do.

       

      Let me know if you have more questions or problems during the implementation.