Adding two data sets to a response poilcy.

[Derek Resendes1709155939]

Hi

Using the link below, I'm trying to add two data sets to the respond policy below with no luck. The reason I have two data sets is because I'm using IPV6 and IPV4 addresses.

I've tried the following, 

!CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("ds_SMTPAllowIPV4") && !CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("ds_SMTPAllowIPV6")

 

New to creating the responder policies

Thanks

Derek

Article - 3a. Citrix ADC - Responder ...

[Michael Adam]

Hello @Derek Resendes1709155939

 

you combine both Dataset with && (AND). But you will see either an IPv4 OR  an IPv6 address from the client. For try || (OR) instead && (AND) in the expression. 
 

Best regards,

 Michael
 

[a.cetin]

hello,

tested below and it worked.

exp: (CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("ds_1") || CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("ds_2")).NOT

add policy dataset ds_1 ipv4
add policy dataset ds_2 ipv6
bind policy dataset ds_1 4.4.4.4 -index 1
bind policy dataset ds_1 4.4.4.5 -index 2
bind policy dataset ds_1 192.168.68.1 -index 3
bind policy dataset ds_2 AA:aa:aa:: -index 1
bind policy dataset ds_2 AF:aa:aa:: -index 2

add responder action you_blocked respondwith "\"your IP blocked\""
add responder policy DS_test "(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\"ds_1\") || CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY(\"ds_2\")).NOT" you_blocked

[Derek Resendes1709155939]

Thank you for you help , the command seem to work and now need to test 

(CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("ds_1") || CLIENT.IP.SRC.TYPECAST_TEXT_T.CONTAINS_ANY("ds_2")).NOT