NimbostratusYou have to know where to place this iRule in terms of execution order since there are other iRules running on the Exchange single virtual.
The easiest way is to give it higher priority than existing iRules used with the Exchange virtual.
By default an iRule event has a priority of 500. The lower the better, so we give this one a priority of 100.
To do that, add this command : "priority 100" before balias's irule above. So you get this:
priority 100
when HTTP_REQUEST {
if {[HTTP::header "User-Agent"] matches_regex {^Apple.*1002.*} } {
if { [HTTP::uri] contains "Cmd=MeetingResponse" } {
log 10.10.10.1 local0.info "Denied iOS 6.1 Device SNAT src=[IP::client_addr] src_port=[TCP::client_port], snat_src=[IP::local_addr] snat_src_port=[TCP::local_port], dst=[IP::server_addr] dst_port=[TCP::server_port]"
reject
}
}
}
See this Excellent article for information about iRule Events and Event priorities: https://devcentral.f5.com/tech-tips...RfEYlFAWdk
For anyone new to F5 LTM.
Copy iRule above.
Connect to BigIP GUI. Go to "Local Traffic/IRules". Choose "Create" at far right. Enter a name for iRule. (no spaces)
Paste iRule in input box then Hit Update.
Go to "Local Traffic/Virutals", a list of virtuals appears. Locate the Exchange virtual, Click on "Edit" under Resources Column at the far right side of screen.
IRule section appears. (middle of screen), click on "Manage" far right of screen. Add the recently created iRule.
HTH.
