For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Domai's avatar
Domai
Icon for Altostratus rankAltostratus
Sep 07, 2016

iRule help to block traffic

Hello my intention is to block traffic from countries which are not on my safe list. So I used the below iRule   when CLIENT_ACCEPTED { if { not([class match [whereis [IP::client_addr] countr...
application delivery
iRules
ekaleido's avatar
ekaleido
Icon for Cirrus rankCirrus
Sep 07, 2016
when CLIENT_ACCEPTED {
  set location [whereis [IP::client_addr]]
  if { [class match -value [IP::client_addr] equals allow_ip] || [class match -value $location equals allow_country] } {
    pool mypool
  } else {
    log "Dropping connection from client: [IP::client_addr], country code: [whereis [IP::client_addr] country]"
    drop
  }
}