For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

veato's avatar
veato
Icon for Nimbostratus rankNimbostratus
Oct 01, 2015

Opening a Port Range

This may be quite simple for the BIGIP pros but I'm not sure of the best way to do what I need.   I have an FTP site in IIS with a data channel port range defined (30000-30300) and the IP address ...
application delivery
ftp
LTM
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Oct 01, 2015

I would try a network forwarding virtual server with an iRule similar to this attached;-

when CLIENT_ACCEPTED {
   if {!([TCP::local_port] >= 30000 && [TCP::local_port] <= 30300)} {
      reject
   } 
}
veato's avatar
veato
Icon for Nimbostratus rankNimbostratus
Oct 01, 2015
As I also have a virtual server for 443 traffic to the same server would this iRule intefere with that and reject the 443?