(ISC)2
301B · Question #194
Which iRule will reject any connection originating from a 10.0.0.0/8 network?
The correct answer is C. when CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }. See the full explanation below for the reasoning.
Question
Which iRule will reject any connection originating from a 10.0.0.0/8 network?
Options
- Awhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::remote_addr] mask 8] switch $remote_ip { "10.0.0.0" { reject } "1.0.0.0" { pool pool_http1 } default { pool http_pool } } }
- Bwhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 8] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }
- Cwhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::client_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }
- Dwhen CLIENT_ACCEPTED { set remote_ip [IP::addr [IP::local_addr] mask 255.0.0.0] switch $remote_ip { "10.0.0.0" { reject } "11.0.0.0" { pool pool_http1 } default { pool http_pool } } }
How the community answered
(34 responses)- A12% (4)
- B9% (3)
- C74% (25)
- D6% (2)
Community Discussion
No community discussion yet for this question.