Forum Discussion
GeoffSweet_3221
Nimbostratus
NimbostratusNeed to permit a list of hosts
So I am sure that I can create an iRule that simply blocks a single host via
when CLIENT_ACCEPTED {
if { [IP::addr [IP::client_addr] equals 10.10.10.10] } {
pool my_pool
}
else {
...
hoolio
Cirrostratus
CirrostratusHi,
You can use a datagroup and the matchclass command (Click here😞
when CLIENT_ACCEPTED {
Check if client IP is not defined in the allowed_clients datagroup
if { not ([matchclass [IP::client_addr] equals $::allowed_clients]) } {
Drop further packets from the client
drop
}
}
If a client doesn't get dropped the VS's default pool will be used.
Aaron
