Nimbostratus
Is there any way to alter the MSM iRule to allow for a customizable whitelist of IPs that we consider to be safe, regardless of what Trusted Source reports?
Employee
I wouldn't recommend to modify the iRule provided with MSM or you will lose support on it.
Instead i would recommend to configure a new iRule that will be triggered before and do your checking.
Here is an example to handle a white list and a black list:
when CLIENT_ACCEPTED {
if { [matchclass [IP::client_addr] equals $::white_list] } {
log local0. "client: [IP::client_addr] found in white_list directed to http_test_pool"
pool http_test_pool
event disable all
}
elseif { [matchclass [IP::client_addr] equals $::black_list] } {
log local0. " client: [IP::client_addr] found in black_list directed to http_test_pool_2"
pool http_test_pool_2
or discard
event disable all
}
}
You just need to specify this iRule in your VS before the MSM one
HTH