Forum Discussion
Jorge_48257
Nimbostratus
NimbostratusiRule to drop port request
How can I drop request to a VIP on tcp port 110 and 143 on a LTM running version 10.2.0? I've tried the following but it does not seem to work. if { [TCP::local_port] != 110} { drop } I get line 1: [...
Jorge_48257Nimbostratus
NimbostratusHere you go.
virtual EXCH-CAS_RPC_vs {
pool EXCH-RPC_pool
destination 10.10.10.10:any
ip protocol tcp
persist exch_rpc_persist
profiles {
tcp-lan-optimized {
serverside
}
tcp-wan-optimized {
clientside
}
}
}
This is used for Exchange RPC but do not want it to listen on unsecured POP and IMAP. That's why we want to block TCP/110 and TCP/143.