For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_Peters_19's avatar
David_Peters_19
Icon for Nimbostratus rankNimbostratus
Aug 13, 2010

Creating a TCP .net iRule to reject IP

Hello All,     I am tring to block IPs that are not on a "White List" and log the rejections.   Because this is an application using .net and TCP I can not use the HTTP profile. I have trie...
application delivery
dev
devops
iRules
Chris_Miller's avatar
Chris_Miller
Icon for Altostratus rankAltostratus
Aug 13, 2010
Posted By naladar on 08/13/2010 06:46 AM

You might try giving this a shot: 

when CLIENT_ACCEPTED {
if {not ([IP::addr [IP::client_addr] equals $::IPsTest]) } {
log local0.info "WirelessCDL:  Client Rejected IP:[IP::client_addr]"
discard
}
}

You have to use matchclass or class match to reference a datagroup, right?