Forum Discussion

Sonny_J_Bonds_1's avatar
Sonny_J_Bonds_1
Icon for Nimbostratus rankNimbostratus
Mar 31, 2015

iRule Exception Help

I have this rule setup on Virtual serverA to allow communication to happen only on the port listed below. I now want to set it so it doesn't run through the rule below when this incoming IP (192.x.x...
application delivery
devops
iRules
  • DevBabu_174449's avatar
    DevBabu_174449
    Mar 31, 2015

    I would try with:

    if { not [IP::addr [IP::client_addr] equals "192.x.x.20"] }
{
   if { not (
[TCP::local_port] == 25 or 
[TCP::local_port] == 53 or 
[UDP::local_port] == 53 or
... 
)  } {

    Drop request drop } }

Sonny_J_Bonds_1's avatar
Sonny_J_Bonds_1
Icon for Nimbostratus rankNimbostratus
Mar 31, 2015

Works like a charm DevBabu, thank you - I really appreciate that. I came very close to having something similar, was missing a closing bracket.

 

Thanks again.