Forum Discussion

Nimbostratus

Feb 27, 2015

Solved

Block range of IP address

I'm needing an iRule to block a range external IP addresses. Example: 106.37.0.0.0 to 106.39.255.255.255... Any assistance would be appreciated, even a link to documentation that explains how t...

jdam_41848
Feb 27, 2015
Hi, I'm sure there are lots of options to do this but here is one I use.

I have an iRule as shown below that references a datagroup called ipblock. Once in place you can just add either host IPs or networks into the datagroup that you want blocked.

when CLIENT_ACCEPTED { if { ([ class match [IP::remote_addr] equals ipblock ]) } { reject } }

jdam_41848

Altocumulus

Feb 27, 2015

Hi, I'm sure there are lots of options to do this but here is one I use.

I have an iRule as shown below that references a datagroup called ipblock. Once in place you can just add either host IPs or networks into the datagroup that you want blocked.

when CLIENT_ACCEPTED { if { ([ class match [IP::remote_addr] equals ipblock ]) } { reject } }