For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Antonio3's avatar
Antonio3
Icon for Altocumulus rankAltocumulus
Jul 14, 2025

Block ipv6

Hi, From the anti-bot profile logs, I noticed requests from an IPv6 client IP. I applied this iRules to the VIP to see what was happening.   when FLOW_INIT {   if { [IP::version] eq "6" } {    ...
security
Antonio3's avatar
Antonio3
Icon for Altocumulus rankAltocumulus
Jul 15, 2025

Hi f51,

Thanks for your support
The sys db log.rules.level is already "Warning"

 

 

sys db log.rules.level {
    default-value "Informational"
    scf-config "false"
    value "Warning"
    value-range "Debug Error Informational Notice Warning"
}

 

If I try to apply a different iRules, for example, log when my public IP contacts the VIP, I see the logs in /var/log/ltm.

 

Thanks

 

 

  • VGF5's avatar
    VGF5
    Icon for Cumulonimbus rankCumulonimbus
    Jul 15, 2025

    Thank you for the update. Try as below. Move the log command before the drop command in your iRule.  

    when FLOW_INIT {
      if { [IP::version] eq "6" } {
        log local0.warning "Blocked IPv6 connection from [IP::client_addr]"
        drop
      }
    }