For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NISHANT_JOE_RA1's avatar
NISHANT_JOE_RA1
Icon for Nimbostratus rankNimbostratus
Oct 18, 2019

Need to use DNS service for allowed IP range.

Hi all,   My customer is the ISP vendor, we have implemented the F5 DNS in his premises. He had given the DNS IP for his customers. Also he need to use DNS service for allowed IP range(their custom...
Kevin_Davies's avatar
Kevin_Davies
Icon for Nacreous rankNacreous
Oct 31, 2019

The iRule below shows the various examples of using an iRule to control the traffic. The return command used below exits the event.

when CLIENT_ACCEPTED {
  # string matching
  if { [IP::client_addr] starts_with "10.10." } { return  }
 
  # subnet matching
  if { [IP::addr [IP::client_addr] equals "10.10.0.0/16" ] } { return }
 
  # class matching
  if { [class match [IP::client_addr] equals my_class_name ] } { return }
  # where my_class_name is an address class/datagroup with your subnets in it. 
 
  # nothing matches, reject the traffic
  reject
}