Forum Discussion

N_Int_282362's avatar
N_Int_282362
Icon for Nimbostratus rankNimbostratus
Feb 15, 2018

IPBlacklist check with iRules

I have list of IP addresses in Data group called "BlackListIP" and it defined as "String" type instead of "Address" like "name": "1.1.1.1, 2.2.2.2, 3.3.3.3, 4.4.4.4, 5.5.5.5, 6.6.6.6" And I hav...
iControlREST
iRules
security
Super-NetOps
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Feb 15, 2018

Logically, your iRule looks ok, try adding logging to see what IP address you connection is coming in on: However you have not included a 

when
at the start of the event - this may be the cause of your problem. 

when CLIENT_ACCEPTED { 
    log local0. "IP: [IP::client_addr]"
    if {[class match [IP::client_addr] contains BlackListIP] } { 
        reject 
    } 
}