Forum Discussion
Matt_64640
Nimbostratus
NimbostratusHelp with client IP filtering and SNAT
Here's the background: My F5 is at version 9.4.6.
I have a publicly published website which resolves to an IP of a virtual server setup on my F5 and which is listening for traffic on ...
hoolio
Cirrostratus
CirrostratusHi Mark,
You could use drop (Click here) or reject (Click here) for client IP addresses which don't match your allow list.
when CLIENT_ACCEPTED {
Check if client is not in the allowed_clients_class datagroup
if { not ([matchclass [IP::client_addr] equals allowed_clients_class])}{
Drop the connection
drop
}
}
Aaron
