Forum Discussion
Petruk_Cemeng_7
Nimbostratus
Oct 10, 2012How to Blocking ULtrasurf?
Hi All,
Is there any irule or configuration on F5 for blocking ultrasurf? I try to use ip intelegence irule on LTM,it did not work because the destination ip address is not registered as bad r...
BT_90520
Nimbostratus
Oct 15, 2012Great seems like the different btw IP::local_addr and IP::remote_addr?
Noted previously IP intelligence as shared did not detect that anonymous proxy.
Just wondering will (now) IP::remote_addr be detected by iprep_lookup or still as before shared?
And if IP intelligence works then iRule for that will also works..something like this
when CLIENT_ACCEPTED {
set ip_reputation_categories [IP::reputation [IP::remote_addr]]
set is_reject 0
if {($ip_reputation_categories contains "Proxy")} {
set is_reject 1
}
if {($ip_reputation_categories contains "Web Attacks")} {
set is_reject 1
}
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects