Forum Discussion
Petruk_Cemeng_7
Nimbostratus
NimbostratusHow to Blocking ULtrasurf?
Hi All,
Is there any irule or configuration on F5 for blocking ultrasurf? I try to use ip intelegence irule on LTM,it did not work because the destination ip address is not registered as bad r...
BT_90520Nimbostratus
Nimbostratus[IP::remote_addr] will fit your case as this is the actual address to be submitted for IP intel checks as well in the quarantine IP blacklist maintained in session. local_addr either give you the VS ip or the SNAT src (if enabled) in client and server respectively. I know previously the IP intel did block the Ultrasurf hence why I am asking why not for your case ... unless Ultrasurf has changed in v10 or later. Will you be able to share that Ultrasurf Dest IP you used for checking?
