Forum Discussion

JCMATTOS_41723's avatar
JCMATTOS_41723
Icon for Nimbostratus rankNimbostratus
Apr 01, 2009

Reflexive irule ACL?

We have a linkcontroller and we would like to see if there is a reflexive type irule that can allow connections initiated/sourced from one host 10.3.3.3 to 10.4.4.4, but not connections initiated/sourced from 10.4.4.4 to 10.3.3.3? I checked the packet filter section but it doesn't seem to have the reflexive type features we are looking for. Thx!
application delivery
dev
devops
iRules
  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Apr 01, 2009
    I suppose you can create the iRule that looks like the following 

     
 when CLIENT_ACCEPTED { 
   if { [matchclass [IP::client_addr] equals $::Hosts]} { 
     forward 
   } else  { 
     drop 
   } 
 }

    Hope this helps

    CB