Forum Discussion

Tyson_James's avatar
Tyson_James
Icon for Cirrus rankCirrus
Mar 15, 2018

iRule to only allow traffic from US, Canada and private networks....

We have a current iRule that only accepts traffic from the US or private networks ( non-routable ). Shown below : when CLIENT_ACCEPTED { if {not ([whereis [IP::client_addr] country] eq "US") and ...
iRules
LTM
security
oguzy's avatar
oguzy
Icon for Cirrostratus rankCirrostratus
Mar 15, 2018

Hi Tyson,

 

You can try the below code:

 

when CLIENT_ACCEPTED {
 if { not ([whereis [IP::client_addr] country] eq "US") and not ([whereis [IP::client_addr] country] eq "CA")} {
    if { not ( [class match [IP::client_addr] equals private_net] ) } {
        reject
    }
  } 
 }