For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Matt_64640's avatar
Matt_64640
Icon for Nimbostratus rankNimbostratus
Oct 01, 2009

Help with client IP filtering and SNAT

Here's the background: My F5 is at version 9.4.6.     I have a publicly published website which resolves to an IP of a virtual server setup on my F5 and which is listening for traffic on ...
application delivery
dev
devops
iRules
Mark_Cloutier's avatar
Mark_Cloutier
Icon for Nimbostratus rankNimbostratus
Dec 01, 2009
I'd like to use this same logic to setup a "whitelist" of clients that are allowed to connect to a virtual server that load balances smtp servers for sending outbound email. Due to SNAT the smtp servers won't see the true client ip so the whitelisting can't be done there.

 

 

Once I have specified authorized smtp clients using the logic of this irule what are the commands to allow use of the virtual server if in the datagroup and not allow otherwise?

 

 

thanks,

 

 

Mark