For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mrad_231364's avatar
Mrad_231364
Icon for Nimbostratus rankNimbostratus
Jun 08, 2018

Block DNS domain on Big IP DNS

Hello,

 

I am trying to block certain domains on a specific Listener (ie ) Can you help me writing an iRule?

 

AFM
BIG-IP DNS
security

1 Reply

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jun 08, 2018

    you can try something like that:

    when DNS_REQUEST {
    if { [DNS::question name] ends_with "example.com" } {
        noerror
        DNS::return
    }
}