For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Matt_Fletcher_1's avatar
Matt_Fletcher_1
Icon for Nimbostratus rankNimbostratus
Aug 31, 2006

FTP Connections

We have a pool for ftp servers. Recently our Infosec department has been making me block specific IPs because of multiple failed logins (even though it's pointless to do so). Our FTP server has the ...
application delivery
dev
devops
iRules
v4
Martin_Machacek's avatar
Martin_Machacek
Historic F5 Account
Aug 31, 2006
Yes, it is. Exactly the same syntax is supported in v9.x. In v9 you may be even able to implement the dynamic blocking using some creative iRule programming. You should also take a look at iControl. It may allow you to let the server dynamically add (and remove) blocked IP addresses to iRule class based on frequency of login failures. This is however all off-topic for this forum.