For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

yves_werniers_1's avatar
yves_werniers_1
Icon for Nimbostratus rankNimbostratus
Oct 14, 2009

class and v9.1.2

Hello,     It seems like the class command was introduced in v10.0, whereas matchclass was introduced in v9.0.   I am running v9.1.2. How can I cerate something classlike and use class...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 14, 2009
You can use matchclass in 9.x or 10.x to evaluate an IP address or string against a class.

 

 

You might also consider adding the three IP addresses to an address type datagroup (aka class) and then use matchclass again to check the XFF header value against the datagroup.

 

 

Be aware that it's likely that attackers could bypass your logic though using obfuscation techniques:

 

 

http://devcentral.f5.com/Default.aspx?tabid=53&view=topic&postid=30900

 

 

Aaron