external calss

You should be able to just separate the fields with spaces and then reference the class from a rule.

 

 

Aaron

No the rule class combo causes the tmm system to core. The rule we are useing is below

 

 

when CLIENT_ACCEPTED {

 

if { ([matchclass [IP::client_addr] equals $::spammers-list])} {

 

log "[IP::client_addr] was dropped as a known spammer"

 

drop }

 

}

 

 

Running the rule causes the tmm to core

If those are all single IP addresses, then you should be able to remove the second half of each line completely, and just build a class list of IP addresses individually. That shouldn't cause any problems with the iRule posted above.

 

 

Colin

Here is a bit more info:

'b class help' info:

External classes

You can store class list information outside the bigip.conf file.

b class extern {

}

The parameter can be one of "filename", "type", or "mode".

The parameter depends on which property is being assigned.

Valid values for "type" are "string", "value", or "ip". Valid values

for "mode" are "read" and "rw". The ip values can be in "network

mask " or "host " format.

The following is an example of an external class configuration.

b class ipvals extern {

filename /home/ip2.class

type ip

mode rw

}

Here is an example...

From the bigip.conf:

class spammers_list extern {
   type ip
   filename "/var/class/external_class"
}

rule external_class_rule {
   when CLIENT_ACCEPTED {
      if { ([matchclass [IP::client_addr] equals $::spammers_list])} {
         log "[IP::client_addr] matched"
      }
   }
}

cat /var/class/external_class

host 172.29.0.10,

network 10.0.0.0 mask 255.0.0.0,

Hope this helps,

Aaron

Found out what the problem was in the data class we had a space between the path and the filename. The GUI let it go but the system blew up when the iRule ran

Ah, yes, that would be the empty class bug. CR66389 fixed in 9.4.

Hi,

 

 

You might be interested in the Messaging Security Module recently announced:

 

 

http://www.f5.com/communication/press/2006/release112006.html

 

 

http://www.securecomputing.com/index.cfm?sKey=1669

 

 

Availability 1//15/07.

 

 

Regards,

 

Wes