For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Filip_Mikulík's avatar
Filip_Mikulík
Icon for Altostratus rankAltostratus
Oct 31, 2014

IP Inteligence availability

Hello, I am using iRule to log IP Inteligence reputation of clients. After upgrade F5 I had problem with availability of this check. There was not the db until update.

Log: 

TCL error: /Common/IPInteligence_xxx  - IP Reputation database (/var/IpRep/F5IpRep.dat) not loaded (line 4) invoked from within "IP::reputation $cip"

And the clients were rejected.

Is there any possibility to check if the IP Inteligence is avaliable or not. And let the clients use the service without rejecting? Thanks, Filip

application delivery
ASM Advanced WAF
devops
iRules
security

2 Replies

  • Filip_Mikulík's avatar
    Filip_Mikulík
    Icon for Altostratus rankAltostratus
    Apr 21, 2015

    I had problem how to parse result of show sys iprep-status to iRule. I resolved this by edit user_alert.conf:

        alert IPInteligence_[xx]-DOWN "TCL error: /Common/IPInteligence_[xx]" {
       exec command="tmsh modify ltm virtual [xx-vs] rules none";
       exec command="logger -p local0.warning IPInteligence_[xx]-DOWN"
    }

    So after the iRule logs the error to the LTM log, user alert removes the iRule and writes the warning to the log.

    Filip