For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Matt_64640's avatar
Matt_64640
Icon for Nimbostratus rankNimbostratus
Oct 01, 2009

Help with client IP filtering and SNAT

Here's the background: My F5 is at version 9.4.6.     I have a publicly published website which resolves to an IP of a virtual server setup on my F5 and which is listening for traffic on ...
application delivery
dev
devops
iRules
Matt_64640's avatar
Matt_64640
Icon for Nimbostratus rankNimbostratus
Oct 02, 2009
Okay, figured out what I was doing wrong. What I was seeing was not the self IP of the LTM, but the connection from the GTM health monitor. What I wasn't seeing was the external connection, and that was because it wasn't getting there (firewall issue upchannel from my F5). Now that the firewall issue's been resolved, I can see the external IPs connecting, which means I can move on to setting the restrictions.

 

 

Once you guys pointed out that the iRule at least should have been right, and that the snat takes place after the CLIENT_ACCEPTED event, I could figure out where to look for the problem.