iRule on GTM/Zonerunner to block Specific IP's

Is this possible?

 

 

I have something like this, but how do I apply it to incoming DNS requests?

 

 

when DNS_REQUEST {

 

 

if { [matchregion ldns "Permitted_Subnets"]} {

 

log local2. "DNS Request from Permitted_Countries topology definition"

 

} else {

 

drop

 

log local2. "DNS Request from Non-Permitted Subnet dropped"

 

 

 

}

 

}

 

 

Thanks Guys!