Forum Discussion

pjcampbell_7243's avatar
pjcampbell_7243
Icon for Cirrus rankCirrus
Apr 14, 2009

Allowed IP relayers list via iRule?

If we route our mail server through the BIG IP - we can't successfully utilize IP based relaying allowance, at least not on the mail server side, since the mail server will only see the self IP of the LTM.

 

 

Is there a way we can use an iRule to allow only a certain list of IPs to connect?
application delivery
dev
devops
iRules
  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Apr 14, 2009
    You can build a irule that allows certain IPs to access the nodes or pools

     

     

    http://devcentral.f5.com/Wiki/default.aspx/iRules/IP__addr.html

     

     

    hope this helps

     

    CB

     

  • pjcampbell_7243's avatar
    pjcampbell_7243
    Icon for Cirrus rankCirrus
    Apr 17, 2009
    Thanks

     

     

    Sounds like I was over-complicating things. Here's a great, very easy way to do it:

     

     

    when CLIENT_ACCEPTED {

     

    if { ! ( [matchclass [IP::client_addr] equals $::relay_hosts_allowed] ) } {

     

    drop

     

    }

     

    }

     

     

     

    where relay_hosts_allowed is a "data list"