For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bman_12685's avatar
bman_12685
Icon for Nimbostratus rankNimbostratus
Jun 11, 2012

custom plugin for dnsbl

I'd like to implement somethig like a plugin for a dns blacklist that checks the ip of a node against upstream dnsbl, I have seen some references to shell scripts such as external monitors is there a...
application delivery
dev
devops
iRules
Richard__Harlan's avatar
Richard__Harlan
Historic F5 Account
Jun 13, 2012
Sounds like you are thinking of doing this to check the IP address of the client from a LTM is that correct? if so you should look at sideband connections. It lets the LTM pause the connection and open a new connection in your case the BL server and get a answer and then use the result in the iRule.

 

 

Doing so you could test the client IP and based on the result allow the connection through or now. the Below is the link to the wiki page for Sideband connections.

 

 

https://devcentral.f5.com/wiki/iRules.SIDEBAND.ashx