grilledcheez_21
Nov 17, 2015Nimbostratus
iRule to allow only some IPs, Data traffic.
Hello,
I'm trying to create an iRule for only allowing certain IPs through to a VIP. I was given this iRule by a co-worker, but it doesn't seem to work. All traffic appears to be getting blocked. I've seen similar rules for HTTP traffic, but this is not an HTTP service, it's just data.
Was hoping someone could take a look and see if I'm missing anything in the rule?
when CLIENT_ACCEPTED {
switch [IP::client_addr] {
10.XX.XX.XX -
10.XX.XX.XX -
10.XX.XX.XX -
10.XX.XX.XX -
10.XX.XX.XX -
10.XX.XX.XX { return }
}
reject
log local0. "Connection rejected from [IP::client_addr]"
}
Thanks.
Couple things. Try adding
and put your reject in theIP::addr
command.default
when CLIENT_ACCEPTED { switch [IP::addr [IP::client_addr]] { 10.XX.XX.XX - 10.XX.XX.XX - 10.XX.XX.XX - 10.XX.XX.XX - 10.XX.XX.XX - 10.XX.XX.XX { return } default { reject log local0. "Connection rejected from [IP::client_addr]" } } }