Forum Discussion

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Jun 21, 2016

DNS Whitelist Responses

Does anyone know if an iRule already exists that accomplishes the following:   DNS Request comes in from client If the request matches an entry in a datagroup table the request is allowed to proce...
AFM
iRules
security
  • Vernon_97235's avatar
    Vernon_97235
    Jun 21, 2016
    when DNS_REQUEST {
    if { [class match [string tolower [DNS::question name]] equals "dg-allowed-dns-queries"] } {
        reject
    }
}
VernonWells's avatar
VernonWells
Icon for Employee rankEmployee
when DNS_REQUEST {
    if { [class match [string tolower [DNS::question name]] equals "dg-allowed-dns-queries"] } {
        reject
    }
}
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jun 21, 2016
The iRule provided by Vernon rejects DNS query matching any in the data-group "dg-allowed-dns-queries". Your iRule seems to send traffic to a pool if it matches the data-group "dg-allowed-dns-queries" and rejects the non-matching queries.