iRule to filter based on subnet

Hi Gorf,

The switch statement you're using performs a string comparison of the client IP against the addresses. It would be more efficient to use an address type datagroup and 'matchclass' to do this. An address datagroup also supports subnets.

http://devcentral.f5.com/wiki/default.aspx/iRules/matchclass

when CLIENT_ACCEPTED {
   if { not ([matchclass [IP::client_addr] equals allowed_subnets_class]) } { 
      drop
   }
}

Aaron