Forum Discussion
Hurting eyes, could someone check this?
Hey all,
Running 9.0.5, I have these rules in place:
rule cyclone_ftp_hhtp_request {
when HTTP_REQUEST {
if { [HTTP::uri] contains "ftp" } {
node 192.168.250.144...
So the safe bet would be [TCP::local_port] because that's where the client is connecting to on the VIP. Sounds like that will work. Thanks all!
