For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jeffnotcarl_142's avatar
jeffnotcarl_142
Icon for Nimbostratus rankNimbostratus
Sep 12, 2014

iCall for DDNS?

I'm told that an iCall may be appropriate to get around the matter of firewall allows for sites that have multiple ip addresses presented for their namespace. For example, microsoft.com may well res...
The_Bhattman's avatar
The_Bhattman
Icon for Nimbostratus rankNimbostratus
Sep 14, 2014

Hi Jeffnotcarl,

Here is an crude example I quickly put together. Hopefully it's a start.

  sys icall script firewall-microsoft { 

    app-service none  
      definition {  
        set ips [exec dig +short @4.2.2.1 microsoft.com A]  
        if {$ips eq ""}{  
           tmsh::modify security firewall address-list microsoft-rule addresses replace-all-with \{ $ips \}  
            } 
       }  
    description none  
    events none  
} 


 sys icall handler periodic microsoft-rule {
    interval 30
    script firewall-microsoft
}

I hope this helps