For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Fernando_33356's avatar
Fernando_33356
Icon for Nimbostratus rankNimbostratus
Oct 07, 2010

rules based on destination using standard VS

Hi have a standard VS (I can't change it to http). I want to drop connection going to a specific IP, I used:     when CLIENT_ACCEPTED {   if { [IP::addr [IP::remote_addr] equals 66.6.63.43/2...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 07, 2010
As Chris and Stefan have suggested, IP::local_addr in CLIENT_ACCEPTED will return the LTM (client's destniation) address for the client connection. In CLIENT_ACCEPTED, IP::remote_addr will return the client IP.

 

 

Can you clarify the scenario more and let us know whether 66.6.63.43 is a pool member IP, a virtual server IP or you're using a wildcard virtual server?

 

 

I'm guessing the iRule Stefan posted will work for your scenario, as it will block connections through a wildcard virtual server destined to 66.6.63.43.

 

 

Thanks, Aaron