Forum Discussion
David_Desautels
Nimbostratus
Nimbostratusirule with data group list
I am trying to write a irule that will allow only certain subnets internally to be allowed to send email to this outgoing email server.
Thought this below might do the trick, but no. Take remote IP...
eey0re
Cirrostratus
CirrostratusEssentially not doing anything allows the connection through. drop or discard will drop the connection from the BIG-IP (but this is a bit brutal), reject will close it. To use this you want to invert your logic, like so:
if { not [class match [IP::remote_addr] equals smtp_relay_allowed] } {
reject
}
Ideally what you want to do is actually respond with some valid SMTP indicating a denied connection.
Another non-iRule approach is to look at the Packet Filters feature.