Forum Discussion

Justin_S's avatar
Justin_S
Icon for Nimbostratus rankNimbostratus
Apr 11, 2014

GeoIP Whitelist iRule

I have been working on a GeoIP whitelist rule to filter traffic to a website. I created a very basic rule but it's not scalable and even less efficient. What I am trying to accomplish is referenci...
application delivery
deployment
devops
iRules
LTM
security
bboyjnr_8532's avatar
bboyjnr_8532
Icon for Cirrus rankCirrus
Apr 11, 2014

just be aware of this little issue i have running a the rule and whats being shown in my logs...

 

Apr 11 16:04:54 ns info tmm[10426]: Rule /Common/UK_allow : Washington172.32.0.65 Apr 11 16:04:57 ns info tmm1[10426]: Rule /Common/UK_allow : Washington172.32.0.65

 

for some reason "172.32" addresses are based in washington, well not exactly... a pc sitting next to my BIGIP ;)

 

thanks,

 

B

 

  • Dave_R_20182's avatar
    Dave_R_20182
    Icon for Nimbostratus rankNimbostratus
    Jan 07, 2016
    172.32.0.65 is in public address space. The RFC1918 range you're thinking of is 172.16.0.0 to 172.31.255.255 (172.16.0.0/12). I'd re-IP your server :)