sundogbrew
Jun 04, 2013Altocumulus
IP restriction irule
I found this old thread and am trying to make it work.
https://devcentral.f5.com/community/group/aft/18255/asg/50
here is what I have
when CLIENT_ACCEPTED {
if { not ([class match [IP::client_addr] equals $::ESB]) }{
Log dropped requests
log local0. "Invalid client IP: [IP::client_addr] - discarding"
drop the request
discard
}
}
Then in Data Group List I have
ESB
1.1.0.0/255.255.0.0 <-sanatized
When I put it in a virtual host and run it I get this error...
TCL error: /Common/esb-mgmt - can't read "ESB": no such variable while executing "class match [IP::client_addr] equals $ESB"
Its like it can't read the variable?
As always, any help is greatly appreciated!
Thanks
Joe