Forum Discussion
Brian_T_359724
Nimbostratus
NimbostratusOpen firewall for Dynamic IP?
I'm new to F5/BigIP ...
How to create a packet filter or otherwise open the firewall to a dynamic IP, like for a site on CloudFlare which changes unpredictably?
AFAIK the packetfilter rule Expressions only allow a static IP
(and is there a way to add comments to the expressions?)
SmithyCirrostratus
From TMOS version 12.0 onwards you can use FQDN in AFM rules. Assuming you have an AFM license: https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-12-0-0/4.html
You can also use FQDN nodes:https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-12-1-0/25.html