Forum Discussion

Hawary's avatar
Hawary
Icon for Altostratus rankAltostratus
Feb 20, 2021

Control access to Exchange services

hi folks, i would like to control access to mail service (mail.abc.com). if user connected from internet, it should not work but allow it from inside network or someone who connected from VPN. i'm t...
application delivery
iRules
LTM
Hawary's avatar
Hawary
Icon for Altostratus rankAltostratus
Feb 28, 2021

hi boneyard,

thanks for your answer. what if i need to block only /owa from outside?. how can i achieve that? Regarding inside, the users are accessing the exchange directly, they are not passing through the F5. i appreciate if you give example for irule to block /owa and allow the other services.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Feb 28, 2021

    there are quite some examples with a quick search

     

    https://devcentral.f5.com/s/question/0D51T00006i7iJf/block-activesync-on-virtual-server

     

    https://devcentral.f5.com/s/question/0D51T00006i7NzlSAE/how-to-block-a-specific-url

     

    https://devcentral.f5.com/s/question/0D51T00006i7Y8w/blocking-a-specific-url-on-a-specific-vip-with-irule

     

    https://support.f5.com/csp/article/K74012450

     

    in your case you dont even have to do something special for inside or outside as inside users dont reach the big-ip

     

    give it a try and / or post what you believe will work.