Forum Discussion

craig_m_254946's avatar
craig_m_254946
Icon for Nimbostratus rankNimbostratus
Mar 17, 2016

iRule to restrict TCP and UDP to the same range of ports.

Like the title says, I'm trying to make an iRule to restrict ports to a VS.   I was trying to use the following, but getting an error. when CLIENT_ACCEPTED { if {([TCP::local_port] >= 10514 ) ...
BIG-IP
security
Patrik_Jonsson's avatar
Patrik_Jonsson
Icon for MVP rankMVP
Mar 17, 2016

You're missing some curly brackets. Try this:

when CLIENT_ACCEPTED {
    if {([TCP::local_port] >= 10514 ) && ([TCP::local_port] <= 10526) || ([TCP::local_port] >= 514 ) && ([TCP::local_port] <= 515) } {
        pool Pool_Name
    } elseif {([UDP::local_port] >= 10514 ) && ([UDP::local_port] <= 10526) || ([UDP::local_port] >= 514 ) && ([UDP::local_port] <= 515) } {
        pool Pool_Name
    } else {
        reject
    }
}

/Patrik