Forum Discussion

A__Gotink_33511's avatar
A__Gotink_33511
Icon for Nimbostratus rankNimbostratus
Jun 20, 2013

How to add multiple ipadresses as source voor VIP

I want to restrict our SMTP server that is offered through BigIP LTM 11.3

 

I only want a list of 20 servers (ipaddresses) to be able to use SMTP (relaying)

 

I cannot restrict it on our Exchange servers because they only see te loadbalancer IP address.

 

In the source field of the VIP i only can enter 1 subnet.

 

that subnet can containt 1 server or several servers on that particular subnet.

 

How can I enter a list? iRules?

 

config
design

2 Replies

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Jun 20, 2013
    How can I enter a list? iRules?you can put ip addresses in data group and use "class match" irule command to check and take whatever action you want.

     

     

    class wiki

     

    https://devcentral.f5.com/wiki/iRules.class.ashx
  • A__Gotink_33511's avatar
    A__Gotink_33511
    Icon for Nimbostratus rankNimbostratus
    Jun 24, 2013

    I could not find the option to add a list of ipadbresses.

     

    I found out that datagroups were (hidden?) under the iRules menu option

     

    I also was looking for a easy example for an iRule

     

    I found and modified one, and this works:

     

    when CLIENT_ACCEPTED {

     

    if { ![matchclass [IP::client_addr] equals SMTP_Allowed_Servers] }{

     

    discard

     

    }

     

    }