For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Richard__Harlan's avatar
Richard__Harlan
Historic F5 Account
Nov 18, 2005

detach command

I the docs there is a reference to the detach command but when I try to use it I get the following error.       line 20: [undefined procedure: detach] [detach]     All I am doing is typ...
application delivery
dev
devops
iRules
unRuleY_95363's avatar
unRuleY_95363
Historic F5 Account
Nov 21, 2005
Ok, I'm confused. CLIENT_ACCEPTED is only triggered once per connection. The event disable command is only effective for the current connection. So, disabling CLIENT_ACCEPTED is somewhat pointless as it should not get triggered again for the same connection. If you are seeing it getting triggered again, it is most likely a new connection. Try changing your log statement to:
log local0. "CLIENT_ACCEPTED: [IP::remote_addr]:[TCP::remote_port] -> [IP::local_addr]:[TCP::local_port]"
This should reveal that you are getting multiple connections.

Perhaps you were wanting to disable the CLIENT_DATA event?

Something you'll want to remember with this problem is that you've already proxied on behalf of the server. So, the client will obviously be much farther along than the server. I'm assuming you left out parts of your rule that takes care of this?