For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

miguel_alvarez_'s avatar
miguel_alvarez_
Icon for Nimbostratus rankNimbostratus
Dec 21, 2017

Is it posible to put this i-rule, to drop a hostname, instead an IP addr?:

when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals some_hostname] } { drop } }  
BIG-IP
devops
irule
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
Dec 21, 2017

You drop connections not IP addresses or Hosts. If I understand you correctly, you just want to drop a connection if a particular HTTP Host is requested. That can be done as follows

when HTTP_REQUEST {
  if { [HTTP::host] eq "www.drop.me" }{
    drop
  }
}

This requires HTTP profile applied to your Virtual Server, and SSL/TLS must be offloaded with a clientSSL profile by BigIP if it arrives encrypted

miguel_alvarez_'s avatar
miguel_alvarez_
Icon for Nimbostratus rankNimbostratus
Dec 21, 2017

One question: Is this the source address that arrives to the F5?: [HTTP::host] eq ";