Forum Discussion

Petruk_Cemeng_7's avatar
Petruk_Cemeng_7
Icon for Nimbostratus rankNimbostratus
Oct 10, 2012

How to Blocking ULtrasurf?

Hi All,   Is there any irule or configuration on F5 for blocking ultrasurf? I try to use ip intelegence irule on LTM,it did not work because the destination ip address is not registered as bad r...
app sec
BIG-IP Access Policy Manager (APM)
security
Petruk_Cemeng_7's avatar
Petruk_Cemeng_7
Icon for Nimbostratus rankNimbostratus
Oct 16, 2012

We previously try to block the ultrasurf , by destination ip address [IP::local_addr] using ip intelegence . The VS use wildcard 0.0.0.0:443.

 

We log the [IP::local_addr] on event when CLIENT_ACCEPTED , but when we check the log and check the ip addrss with ipreplookup and also from brightcloud, it's is not detected as malicious ip.That's why i cannot use the ip intelegence to block ultrasurf.

 

-Petruk