Forum Discussion
lmwf1_55268
Nimbostratus
Nimbostratuscan an irule apply to a NAT?
We have a desire to log/monitor ports going thru a NAT so that we can block certain ports later on?
when SERVER_CONNECTED {
This logs information about:
*) the clientside part of the client<->LTM connection, and
*) the serverside part of the LTM<->server connection.
log local0.info "Complete connection: [IP::client_addr]:[TCP::client_port]<->LTM<->[IP::server_addr]:[TCP::server_port]"
}
Is there a way to apply an irule directly to a NAT?
Or we have to create a pool, irule, then associate the irule with the VS? Thanks!
2 Replies
hoolioCirrostratus
You cannot apply a rule to a NAT. It would be possible to do as you've suggested and create a one-to-one virtual server defined on port 0 (any) and then log the connections with the iRule. It's easier with an iRule to limit the ports compared with a NAT.
Aaron
lmwf1_55268Thanks a bunch for your quick reply.
