Forum Discussion
geolocation blocking
using an irule to determine geolocation and block
you want one? you have one?
if you want one perhaps you should google a bit first, it isn't that hard.
- Lee_Sutcliffe
Nacreous
Damn these Russian bots
- Ashwin_Venkat
Employee
Hello Lindsay,
You can use an iRule or also an LTM policy in order to filter for traffic based on geolocation and reject them. An iRule gives you the opportunity to drop the traffic, so the malicious/suspicious user won't know whether or not their request made it to the end destination. For example, if you want to reject/drop suspicious traffic from Iran, you can use an iRule like this:
when CLIENT_ACCEPTED { if {[whereis [IP::client_addr] country] == "IR"} { drop } }
For more info on the "whereis" command: https://devcentral.f5.com/wiki/iRules.whereis.ashx
The country code you specify for the whereis command within the iRule or the LTM policy is based on ISO-3166-2: https://en.wikipedia.org/wiki/ISO_3166-2
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com