That's right. The backend server needs to understand the custom TCP header in order to extract and make use of it - which probably the SMTP server do not.
Other options are USIP and as you mentioned - having the allow list on the Netscaler.
j
Julian Mooren
09/05/2023, 9:51 AM
Different NetProfiles (if needed for the relay adressing) and ListenPolicy Expressions for SMTP traffic will save a lot of headache and bandwith.
k
Kari Ruissalo (WyW)
09/05/2023, 11:10 AM
If it's an option, I'd just do the whitelisting on the NetScaler. Ofc you need to consider that it supports your production, so that all the necessary ppl are able to control the whitelist.
p
Preston Gallwas (Atum)
09/11/2023, 8:51 AM
Allow list on netscaler, this is the way.
Preston Gallwas (Atum)
09/11/2023, 8:52 AM
Command policy and nitro api wee gui powershell app to allow normal folk to have a go