Spade
02-17-2010, 02:32 PM
Me, well I started out this morning doing the typical work of assigning network ports and IP addresses for new server requests throughout the US and Mexico. Got the phone guys to fix my voicemail....migrated me to a new VoIP phone system and my phone wouldn't answer external calls with Voice mail.....it's very hard to ignore people when your phone won't send it to voice mail. :D
Then I started working on the F5 LTM (local traffic manager) setting up a Virtual server to load balance our 3 SMTP (Simple Mail Transfer Protocol) servers in one of our DMZ networks...fun part....they have an access list. Argh. So then I had to figure out how to write an iRule to only allow specific IP addresses to access the VIP:
How do I do this you ask? (I can tell you're all on the edge of your seat) Well first I create a Data Group list called PRD_SMTP_Relay_Allowed and added all the IP addresses in there....very boring when it's a list of 200+ addresses.
Then I created a new iRule again named PRD_SMTP_Relay_Allowed (Keep everything easy to understand for others) and in that Rule I did this:
when CLIENT_ACCEPTED {
if { [matchclass [IP::client_addr] equals $::PRD_STMP_Relay_Allowed] }{
#Uncomment the line below to turn on logging.
#log local0. "Valid client IP: [IP::client_addr] - forwarding traffic"
forward
} else {
#Uncomment the line below to turn on logging.
#log local0. "Invalid client IP: [IP::client_addr] - discarding"
discard
}
}
And it's only 1:30 in the afternoon. Bring it on!
Then I started working on the F5 LTM (local traffic manager) setting up a Virtual server to load balance our 3 SMTP (Simple Mail Transfer Protocol) servers in one of our DMZ networks...fun part....they have an access list. Argh. So then I had to figure out how to write an iRule to only allow specific IP addresses to access the VIP:
How do I do this you ask? (I can tell you're all on the edge of your seat) Well first I create a Data Group list called PRD_SMTP_Relay_Allowed and added all the IP addresses in there....very boring when it's a list of 200+ addresses.
Then I created a new iRule again named PRD_SMTP_Relay_Allowed (Keep everything easy to understand for others) and in that Rule I did this:
when CLIENT_ACCEPTED {
if { [matchclass [IP::client_addr] equals $::PRD_STMP_Relay_Allowed] }{
#Uncomment the line below to turn on logging.
#log local0. "Valid client IP: [IP::client_addr] - forwarding traffic"
forward
} else {
#Uncomment the line below to turn on logging.
#log local0. "Invalid client IP: [IP::client_addr] - discarding"
discard
}
}
And it's only 1:30 in the afternoon. Bring it on!