For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ipman_1988_5418's avatar
ipman_1988_5418
Icon for Nimbostratus rankNimbostratus
Aug 08, 2017

Apply AFM policy dynamically via iRule

Is there a way to apply an AFM policy dynamically via an irule based on source country? I used to have an irule that did this using data-group list now we use AFM on the any/any forwarder but we've f...
AFM
BIG-IP DNS
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Aug 10, 2017

Hi,

This Irule will work for ltm with dns profile. You may be able to enable on arm rule.

when DNS_REQUEST {
   switch [DNS::question type] {       
       "MX" - "SOA" - "NS" {           
           return           
       }           
       default {
           DNS::header rcode NOERROR
           DNS::return 
   }   
}