F5 ASM - locally defined geolocation

Hi,

you can try this irule to unblock requests based on the geolocalisation violation and the IP address in a data group

when HTTP_REQUEST {
    set disable_geolocalisation 0
    if {([class match [IP::client_addr] equals "DG_Client_IP" ])} {
        set disable_geolocalisation 1
    } elseif {[info exists AllowedGroups]}{
        set disable_geolocalisation 0
    }
}

when ASM_REQUEST_DONE {
    if {$disable_geolocalisation} {
        if {[llength [ASM::violation names] == 1 && [lsearch -exact VIOL_GEOLOCATION [ASM::violation names]] == 1 } {
            ASM::unblock
        }
    }
}