Forum Discussion
bmarlow_10657
Nimbostratus
Oct 28, 2009irule to redirect DNS traffic
We are trying to create an iRule to catch any wayward DNS traffic. We created a default VS for all port 53 traffic, but now we need a specific iRule so that we can forward these DNS request to the NameServer that isn't on the same network.
For the life of me I can't seem to find something on here that will do that. I'm looking for something like:
when CLIENT_ACCEPTED {
if { [IP::addr [IP::client_addr] equals "0.0.0.0/0"]
} {
node "192.168.1.1"
}
}
Any help would be greatly appreciated.
- The_Bhattman
Nimbostratus
If it's on a seperate network you might need to apply SNAT Automap into your irulewhen CLIENT_ACCEPTED { if { [IP::addr[IP::client_addr] eq "0.0.0.0/0"] } { snat automap node 192.168.1.1 } }
- hoolio
Cirrostratus
Another option would be to enable SNAT automap on the VIP and create a pool with 192.168.1.1 in it and remove the iRule. - L4L7_53191
Nimbostratus
You may also consider a service specific 0.0.0.0:53 VIP with this iRule applied to it. That way you'll be able to treat this traffic uniquely from a profile/protocol/iRule perspective.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects