Forum Discussion
Jonathan_Robins
Nimbostratus
NimbostratusGTM iRule to block certain IPs DNS Query of a WideIP
Hello
I need to stop a GTM Wide IP from responding to client IPs unless they are in a whitelist.
Ideally the GTM would respond with an NSDOMAIN rather than drop the request.
I am...
Chris_Miller
Altostratus
AltostratusCan you try this syntax for matchclass?
when DNS_REQUEST {
if { ![class match [IP::client_addr] eq ip_allowed_datagroup] } {
cname "somewhere.else" } }
Make sure your datagroup is an address-type and not string-type.
