Forum Discussion

sundogbrew's avatar
sundogbrew
Icon for Altocumulus rankAltocumulus
Jun 04, 2013

IP restriction irule

I found this old thread and am trying to make it work.   https://devcentral.f5.com/community/group/aft/18255/asg/50   here is what I have     when CLIENT_ACCEPTED {   if { not ([clas...
application delivery
dev
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 06, 2013
Does it discard as required? Are you using an address-based data group? 


when CLIENT_ACCEPTED {
    if { not ( [class match [IP::client_addr] equals ESB] ) } {
         Log dropped requests
        log local0. "Invalid client IP: [IP::client_addr] - discarding"
        drop the request
        discard
    }
}