Forum Discussion

toshi_01_132399's avatar
toshi_01_132399
Icon for Nimbostratus rankNimbostratus
Aug 30, 2013

mysql ip access control

I would like to do the ip access control by using a irule. However, I failed in the following way. pool-allowhost-01 have kept some mysql. when CLIENT_ACCEPTED { if { [IP::addr [IP::remote_a...
application delivery
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 31, 2013

Okay, unless I'm just missing it, the iRule looks fine. Can you add in some logging and report back the results?

when CLIENT_ACCEPTED { 
    if { not ( [IP::addr [IP::client_addr] equals 192.168.1.0/24] ) and not ( [IP::addr [IP::client_addr] equals 172.20.1.262] ) } { 
        log local0. "Rejecting client: [IP::client_addr]"
        reject 
    } else {
        log local0. "Allowing client: [IP::client_addr]"
    }
}