Need an irule to block incoming connections if not matching a defined data group of addresses

Hello,

Edit - just realized I had [TCP::client_addr] instead of [IP:client_addr]

when CLIENT_ACCEPTED {
    Check if destination port is SMTP and the client IP is not in the allow list
    if {[[TCP::local_port] equals 25] and [class match [IP::client_addr] ne DATAGROUPNAME]}{
        Drop the traffic
        drop
}
}

Hello,

Edit - just realized I had [TCP::client_addr] instead of [IP:client_addr]

when CLIENT_ACCEPTED {
    Check if destination port is SMTP and the client IP is not in the allow list
    if {[[TCP::local_port] equals 25] and [class match [IP::client_addr] ne DATAGROUPNAME]}{
        Drop the traffic
        drop
}
}

Thanks, the rule is being applied to the smtp virtual server which is only port 25. I wrote it like so: when CLIENT_ACCEPTED {

if { [matchclass [IP::client_addr] equals trusted_networks] } {

pool smtp_pool

} else {

reject

} }

Where trusted_networks is the data group and smtp_pool is the pool associated with the virtual server. I applied this irule to the VS.

Thanks Dareuja, i realized that and switched to class match. Appreciate your help!