For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ravager's avatar
Ravager
Icon for Altostratus rankAltostratus
Apr 10, 2021

restrict access to a vs by a datagroup but temp allow exceptions and log

So i basically have the concept of the what i want to do programatically but need some assistance turning it into a irule.   I have virtual server that has open access and I want to change it to ...
iRules
LTM
security
spalande's avatar
spalande
Icon for Nacreous rankNacreous
Apr 10, 2021

value is optional to add description. you can keep it blank. Reject can be commented out until IP address list is confirmed to allow all traffic

when CLIENT_ACCEPTED {
 if { ![class match [IP::client_addr] eq "datagroup_allowed_ip" ] }{
  log local0. "Dropped connection: client IP [IP::client_addr] is not in datagroup."
  #reject
  }
 }