Forum Discussion
Michael_Wood_18
Nimbostratus
Feb 27, 2015Block range of IP address
I'm needing an iRule to block a range external IP addresses. Example: 106.37.0.0.0 to 106.39.255.255.255...
Any assistance would be appreciated, even a link to documentation that explains how t...
- Feb 27, 2015
Hi, I'm sure there are lots of options to do this but here is one I use.
I have an iRule as shown below that references a datagroup called ipblock. Once in place you can just add either host IPs or networks into the datagroup that you want blocked.
when CLIENT_ACCEPTED { if { ([ class match [IP::remote_addr] equals ipblock ]) } { reject } }
Lee_Payne_53457
Cirrostratus
Feb 27, 2015You want something like:
when CLIENT_ACCEPTED { if { [IP::addr 106.37.0.0.0/13 equals [IP::client_addr]] } { drop }
}
- Michael_Wood_18Feb 27, 2015
Nimbostratus
Thank you for your response. I'll be able to use both answers.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects