For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thomas_Leroy's avatar
Thomas_Leroy
Icon for Nimbostratus rankNimbostratus
Mar 16, 2018

Block URL iRule

Hi, I try to block URL based on the DNS request : when DNS_REQUEST {if {[class match [DNS::question name] contains "URL_blocking"] } { log local0. "website blocked [DNS::question name]" DNS::...
application delivery
BIG-IP DNS
iRules
Thomas_Leroy's avatar
Thomas_Leroy
Icon for Nimbostratus rankNimbostratus
Mar 20, 2018

For those interested, this is the best solution I found : 

when DNS_REQUEST {

set lower [string tolower [DNS::question name]]
set q_name_label_split [split $lower "."]
set q_name_label [lindex $q_name_label_split end-1] 

if {[class match $q_name_label equals "URL_blocking"] }{
 log local0. "website blocked [DNS::question name] <$q_name_label> $q_name_label $lower"
 DNS::header rcode NXDOMAIN
 DNS::return
  }  
}

I split the request and get the domain to compare to my list