For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Mar 05, 2014

I'm not sure if you're planning to use this rule with other rules that are dependent on the variables, but if all you want to do is to SNAT requests from certain IPs or networks, then this iRule should do it.

when CLIENT_ACCEPTED {
    if { [matchclass [IP::client_addr] equals exch2007servers ] } {
        snatpool snat_exch2007
    }
}

Note that you have to create and populate an address type data group list, ie "exch2007", with the IPs or network of the exchange servers.

/Patrik