Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Marco_Lei's avatar
Marco_Lei
Icon for Altostratus rankAltostratus
Nov 28, 2018

Create iRule condition refers to a set of data (strings)

So I'm creating an iRule on DNS Listener that, when external ip (IP not in 172.16.0.0/12) query specific domain name (such as "abctest.example.com") , stop the query and reply the DNS query by NXDoma...
application delivery
irules
stan_piron's avatar
stan_piron
Icon for Cumulonimbus rankCumulonimbus
Nov 29, 2018

You can search in the list

when DNS_REQUEST {
    set filter_list {"abctest.example.com" "deftest.test.com" "abctest.foobar.com" "abctest.barfoo.com" "exampleabc.foo.com"}
    if  { [lsearch -exact $filter_list [DNS::question name]] ne -1 && ![IP::addr [IP::client_addr] equals 172.16.0.0/12]} {
        DNS::header rcode NXDOMAIN
        DNS::return
    }
}