F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Mrad_231364's avatar
Mrad_231364
Icon for Nimbostratus rankNimbostratus
Jun 08, 2018

Block DNS domain on Big IP DNS

Hello,   I am trying to block certain domains on a specific Listener (ie ) Can you help me writing an iRule?  
AFM
BIG-IP DNS
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Jun 08, 2018

you can try something like that:

when DNS_REQUEST {
    if { [DNS::question name] ends_with "example.com" } {
        noerror
        DNS::return
    }
}