For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

toshi_01_132399's avatar
toshi_01_132399
Icon for Nimbostratus rankNimbostratus
Aug 30, 2013

mysql ip access control

I would like to do the ip access control by using a irule. However, I failed in the following way. pool-allowhost-01 have kept some mysql. when CLIENT_ACCEPTED { if { [IP::addr [IP::remote_a...
application delivery
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Aug 30, 2013

have you checked tcpdump?

e.g.

 tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host x.x.x.x or host y.y.y.y

x.x.x.x is client ip
y.y.y.y is server/pool member ip
  • toshi_01_132399's avatar
    toshi_01_132399
    Icon for Nimbostratus rankNimbostratus
    Aug 30, 2013
    Thank you. i have checked tcpdump at all member servers. however i could not confirm ip packet from load balancer. ip packet seem to have stopped in load balancer.
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Aug 30, 2013
    can you run tcpdump on bigip?
  • toshi_01_132399's avatar
    toshi_01_132399
    Icon for Nimbostratus rankNimbostratus
    Aug 30, 2013
    Unfortunately, i do not have permission to login to bigip. If possible, I asked administrator.