Forum Discussion
CirrusHow can I disallow a particular IP with ASM?
I'm viewing event logs and same IP is just hammering us. I just want to block it (temporarily would be ideal, too...) but "Disallow this geolocation" I believe will block the entire Country.
2 Replies
oguzyCirrostratus
Hi patonbike,
As you stated geolocation based protection blocks the entire country. You can use iRule to drop connection from specific IP.
You can examine the following the link: irule to drop based on url and source ip
- boneyard
MVP
which version are you running?
with the newer ones check: Application Security : IP Addresses : IP Address Exceptions ›› New IP Address Exception... and set it to always block.
in the past ASM didnt do this easily, probably an iRule to block the IP is easier.
https://devcentral.f5.com/questions/can-i-block-an-ip-address
this has some suggestions to do it (partially) with ASM: https://devcentral.f5.com/questions/blocking-traffic-from-single-ip-with-block-page-on-asm
