LB_SELECTED iRule to deny based on source and dest address

class match will be better than a lot of if elseif or switch statements. Easier to manage

I would have a clientside data group and serverside data group if you can separate the lists? I.e. any source matched to any destination.