How to reject IMAPS session if client IP is contained within a data list.

Hi Brad,

you need to change the iRule event to CLIENTSSL_HANDSHAKE (event triggered after TLS handshake is complete) and then use SSL::respond to respond your message through the established TLS channel.

when CLIENTSSL_HANDSHAKE {
    if { [class match [IP::client_addr] equals imap_blocked_ips] } {
        SSL::respond "* BYE; Service Denied"
        drop
    }
}

Cheers, Kai