For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thornid's avatar
Thornid
Icon for Nimbostratus rankNimbostratus
Jul 01, 2019

Restrict Source IPs iRule

Hi all   Forgive what may be such an easy iRule question but unfortunately my experience with them is rather limited and time is of the essence. We have an iRule which looks to be doing something w...
application delivery
iRules
LTM
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jul 02, 2019

Hi

 

Have you confirmed that the CLIENT_ACCEPTED code is firing. Put a log statement in after the SSL profile line just to confirm that this is working

when CLIENT_ACCEPTED {     
  if { [IP::addr [IP::client_addr] equals 1.2.3.4/32] } {
    SSL::profile new-ssl-profile
	set sourceip 1 
        log local0. " Source IP Config is working for [IP::client_addr]"