For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Terry_Schmidt_1's avatar
Terry_Schmidt_1
Icon for Nimbostratus rankNimbostratus
Jun 11, 2014

Thanks Cory, but I think we have solved this by using this code:

 

when CLIENT_ACCEPTED { if { not ( [class match [IP::client_addr] equals rtp_allow] ) } { reject } }

 

This has a Data Group (rtp_allow) with the two IP address in it that are to be allowed. In testing we were able to include my IP address in this Data Group and I was able to access the internal web server page and when my IP address gets removed from the Data Group the web page is not available.

 

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Jun 11, 2014
That's a good scaling solution if you want to add more addresses to it moving forward. Glad to hear you got it working.