Forum Discussion
Oct 20, 2015
Hi Gunjan
Change or to and and client port to TCP::local_port and it should work (providing that you don't filter on the client source ports?).
Adding the rule in nicer formatting in case someone else wants to chip in:
rule allowing_tcp_udp_traffic_rl {
when CLIENT_ACCEPTED {
Check if requested port is allowing only TCP 443, TCP 80, UDP 4500 and UDP 500
if { ( [TCP::client_port] != 443 and [TCP::client_port] != 80 and [UDP::client_port] != 500 and [TCP::client_port] != 4500 ) } {
Drop request
drop
}
}
}
/Patrik