Forum Discussion
Kevin_Nail
Nimbostratus
NimbostratusDatagroup and class match
Been scouring through the docs and can't find any good resource that addresses my question. Please help.
I am tasked with creating an iRule that will check incoming packets for the client_ip...
jscharfenberg_3Nimbostratus
NimbostratusChris,
I am going to use what you suggested for allowing certain hosts to use EWS as we're locking down exchange.
overall something like this....
when HTTP_REQUEST { "/ews*" { if {! [class match [IP::client_addr] eq Allowed_Hosts_EWS]}{ HTTP::respond 403 content {Blocked!} } logs sent to /var/log/ltm log local0. "[IP::client_addr] was NOT approved via exeption list" } }
Does this look correct? I need to add some kind of logging that i can comment out when we turn it on and local seeems fine.
