Forum Discussion
David_Peters_19
Nimbostratus
NimbostratusCreating a TCP .net iRule to reject IP
Hello All,
I am tring to block IPs that are not on a "White List" and log the rejections.
Because this is an application using .net and TCP I can not use the HTTP profile. I have trie...
Chris_Miller
Altostratus
AltostratusWhat version are you using? If you're using a newer version of 10.x, this will be the best way to do it.
when CLIENT_ACCEPTED {
if { !( [class match [IP::client_addr] eq IPsTest] )} {
discard
log local0. "WirelessCDL: Client Rejected:[IP::client_addr]"
} }
If you're on an older version:
when CLIENT_ACCEPTED {
if { !( [matchclass [IP::client_addr] eq $::IPsTest] )} {
discard
log local0. "WirelessCDL: Client Rejected:[IP::client_addr]"
} }
Using $:: disables CMP but I can't recall whether you can reference DGs without "class match"
