Forum Discussion
Firewater_29708
Nimbostratus
NimbostratusBlocking iOS 6.1 Devices on Exchange 2010
This is more informative, the last few hours we started experenceing issues with Apple iOS 6.1, essentially malformed meetings on a device cause the device to get into a sync loop which causes excess...
hoolio
Cirrostratus
CirrostratusA serverside connection hasn't been established in HTTP_REQUEST for the first request on a TCP connection. So you'll get a runtime error if you try to run commands to return the server IP and/or port.
Can you try this version which should be more efficient using a string comparison instead of a regex?
priority 100
when HTTP_REQUEST {
if {[string match -nocase "apple*1002*" [HTTP::header "User-Agent"] and [HTTP::uri] contains "Cmd=MeetingResponse" } {
log local0. "Denied iOS 6.1 Device SNAT src=[IP::client_addr] src_port=[TCP::client_port], dst=[IP::local_addr] dst_port=[TCP::local_port], virtual=[virtual name]"
reject
event disable all
}
}
Aaron
