Forum Discussion
Desai_124243
Nimbostratus
Oct 20, 2015Only 4 TCP/UDP ports allowed in Single Virtual
Hi,
We allow only 4 TCP/UDP ports Single Virtual . Is below IRULE correct for it?
rule allowing_tcp_udp_traffic_rl {
when CLIENT_ACCEPTED {
Check if requested port is allowing only TC...
Andy_McGrath
Cumulonimbus
Oct 20, 2015Need to check the local TCP/UDP port and also logic is reversed as doing multiple 'not equal to' statements, try the following iRule:
when CLIENT_ACCEPTED {
Check if requested port is allowing only TCP 443, TCP 80, UDP 4500 and UDP 500
if { ( [TCP::local_port] != 443 and [TCP::local_port] != 80 and [UDP::local_port] != 500 and [TCP::local_port] != 4500 ) } {
reject
}
}
Only thing not sure about is having the TCP:client_port and UDP::client_port within the same if statement would work, might need to test if the connection is a TCP or UDP connection first.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects