mysql ip access control

i think the original irule below is okay.

when CLIENT_ACCEPTED {
    if { [IP::addr [IP::remote_addr] equals 192.168.1.0/24] } {
         pool pool-allowhost-01
    } else {
         reject
    }
}

may you add log command to the irule something like what kevin suggested? also, i think it would be helpful if you can run tcpdump on bigip.

e.g.

 tcpdump -nni 0.0:nnn -s0 -w /var/tmp/output.pcap host 192.168.1.30 or host 192.168.1.50 or host 192.168.1.51 or host 192.168.1.52

and can you post the virtual server, pool and snatpool configuration here?

 tmsh list ltm virtual (virtual server name)
 tmsh list ltm pool (pool name)
 tmsh list ltm snatpool (snatpool name)

just my 2 cents.