For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dearsanky's avatar
dearsanky
Icon for Nimbostratus rankNimbostratus
Feb 28, 2016

DNS Recursion Desire restriction and Blacklist

Hi, I am writing an iRule to insert answer for blacklist domain, restrict query based on source (defined in Datagroup), Answer all query from everyone coming for Authoritative Answer. Need help to g...
BIG-IP DNS
iRules
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Mar 01, 2016
Will respond tomorrow. But right now it seems you can get rid of the DNS_RESPONSE event and sone variables. In addition I've spotted a coding issue in your string tolower syntax. Question: I'm not familiar with the DNS::last_act command. What is the purpose to use this command for those blacklisted commands?