Forum Discussion

ipman_1988_5418's avatar
ipman_1988_5418
Icon for Nimbostratus rankNimbostratus
Sep 25, 2013

GeoLocation iRule Client_Accepted missing some traffic

I have an iRule that fires on client_accepted applied to a virtual forwarder (0.0.0.0) that basically forwards all tcp and udp traffic (not destined to our GTM DNS virtual). The iRule does a whereis ...
application delivery
devops
iRules
ipman_1988_5418's avatar
ipman_1988_5418
Icon for Nimbostratus rankNimbostratus
Sep 26, 2013

Well, I just got this entry in my firewall. It's resolving to an Argentina address which is the first country in my block list.

 

 

 

The packet that came through was udp port 1434 ms-sql source port 3176

 

 

 

size of geoip database = 60519510, version = GEO-148 20130606 Build 1 Copyright (c) F5 Networks Inc All Rights Reserved

 

geoip_seek = 00c0fd0d

 

geoip record ip = 200.32.4.10

 

country_code = AR

 

country_name = Argentina

 

region_name = Distrito Federal

 

 

 

I added return to each elseif section right after the drop statement.