For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

superuser_22978's avatar
superuser_22978
Icon for Nimbostratus rankNimbostratus
Nov 04, 2015

irule for range of ports and a few specific ports

Hi Guys..I have request to open up ports from 56000 to 57000 and 3389,10520,10521. I have the irule as below is not working. Connections are getting refused. Please suggest.   when CLIENT_ACCEPTED...
application delivery
devops
iRules
Brad_Parker_139's avatar
Brad_Parker_139
Icon for Nacreous rankNacreous
Nov 04, 2015

Looks like just a little syntax issues. Try this.

when CLIENT_ACCEPTED {
    if { (([TCP::local_port] >= 56000) && ([TCP::local_port] <= 57000)) || ([TCP::local_port] == 3389) || ([TCP::local_port] == 10520) || ([TCP::local_port] == 10521) } {
        pool qa_pool
    }
    else {
        reject
    }
}
superuser_22978's avatar
superuser_22978
Icon for Nimbostratus rankNimbostratus
Nov 05, 2015
Thank you Brad..But When I used the above rule you suggested, when I do testing virtual server is accepting the telnet on all ports(not only on 3389, 10520, 10521 and 56000 - 57000). Virtual server is not rejecting the connections on different ports other than the ports mentioned in Irule.