For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

3 Replies

  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Jan 11, 2012
    There are several different ways. However, we there are people in the forum that have done this. Here is a path to the forumn

     

     

     

    http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/afv/topic/aft/1174760/aff/5/showtab/groupforums/Default.aspx

     

     

     

    I hope this helps

     

    Bhattman
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Jan 11, 2012
    You'll want to look at the drop or reject command in conjunction with IP::client_addr, most likely:

     

     

    http://devcentral.f5.com/wiki/iRules.drop.ashx

     

    http://devcentral.f5.com/wiki/iRules.reject.ashx

     

    http://devcentral.f5.com/wiki/iRules.IP__client_addr.ashx

     

     

    And yes, Bhattman is right, there are lots of examples floating around. :)

     

     

    Colin
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jan 11, 2012
    If you have a set of client IPs you want to block, you could add them to an address type data group and then use the class command to check the client IP:

     

     

    http://devcentral.f5.com/wiki/iRules.class.ashx

     

     

    Here's an example:

     

    http://devcentral.f5.com/wiki/iRules.AccessControlBasedOnNetworkOrHost.ashx

     

     

    Aaron