Forum Discussion
pjcampbell_7243
Cirrus
CirrusAllowed IP relayers list via iRule?
If we route our mail server through the BIG IP - we can't successfully utilize IP based relaying allowance, at least not on the mail server side, since the mail server will only see the self IP of the LTM.
Is there a way we can use an iRule to allow only a certain list of IPs to connect?
2 Replies
- The_Bhattman
Nimbostratus
You can build a irule that allows certain IPs to access the nodes or pools
http://devcentral.f5.com/Wiki/default.aspx/iRules/IP__addr.html
hope this helps
CB 
pjcampbell_7243Thanks
Sounds like I was over-complicating things. Here's a great, very easy way to do it:
when CLIENT_ACCEPTED {
if { ! ( [matchclass [IP::client_addr] equals $::relay_hosts_allowed] ) } {
drop
}
}
where relay_hosts_allowed is a "data list"
