Forum Discussion

dariusz_19888's avatar
dariusz_19888
Icon for Nimbostratus rankNimbostratus
Mar 22, 2017

IPI - Custom Black List Category

Hello, Is it possible to see ip addresses contained in a custom IPI black list category?  
AFM
security
Maciej_Waliszko's avatar
Maciej_Waliszko
Icon for Nimbostratus rankNimbostratus
Mar 23, 2017

I think the idea behind this question is different. Let's say that some source IP addresses are misbehaving and because of that they are automatically added to a custom blacklist category named for example BANNED_IPs. The question is: how to check if that category has some IPs in it?

 

  • Tikka_Nagi_1315's avatar
    Tikka_Nagi_1315
    Historic F5 Account
    Mar 23, 2017

    tmctl -w120 ip_intelligence_stat

     

    will give you the list of blacklisted ips for each category.

     

  • dariusz_chomiuk's avatar
    dariusz_chomiuk
    Icon for Nimbostratus rankNimbostratus
    Mar 24, 2017

    Thanks a lot Tikka Nagi... It's very helpfull command. Please check output from my LB - I'm not shure that my AFM_WHITE_LIST running ok.

     

    1. Documentation: https://devcentral.f5.com/s/feed/0D51T00006i7fhwSAA

       

    2. My configration

       

     

    1. Output

     

    Please say - that this funcionality running ok.

     

    Br Darek

     

  • Tikka_Nagi_1315's avatar
    Tikka_Nagi_1315
    Historic F5 Account
    Mar 24, 2017

    I believe the output of tmctl ip_intelligence_stat is correct. AFM_WHITE_LIST category shows 0 ip addresses blacklisted.

     

  • jimmythegeek_10's avatar
    jimmythegeek_10
    Historic F5 Account
    Apr 13, 2017

    Is AFM_FEED_WHITE_LIST_LOCAL referenced in an active IPI policy?