For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JWhitesPro_1928's avatar
JWhitesPro_1928
Icon for Cirrostratus rankCirrostratus
Jun 01, 2016

iRule to add IP to blacklist/feed

Is there an iRule command to add an IP Address to one of the blacklist feeds? Ideally I would like to be able to add an ip address with an irule to the new shun feature/list on AFM so that it would ...
AFM
iRules
security
James_Betts_290's avatar
James_Betts_290
Icon for Cirrus rankCirrus
Dec 13, 2016

What this user is trying to do is something I think F5 should address. I had the ability to dynamically block IP addresses based on behavior all the way back in 2000 using CheckPoint and ISS RealSecure. There are behaviors that are inexcusable that ASM and AFM would be hard-pressed to detect; the ability to easily black-list malefactor IPs would be a huge asset. Once an attacker is blocked from doing anything at all with your site, they will usually move on to greener pastures.