For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Philippe_Tempel's avatar
Philippe_Tempel
Icon for Nimbostratus rankNimbostratus
Dec 05, 2012

Permit only North American network blocks

Is it possible to only permit North American netowrk bloks to an F5 hosted site (or VIP)? I would get the list for Canada, US and Mexico from here: http://www.ipdeny.com/ipblocks/. Then massage it ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Dec 05, 2012
Hi Philippe,

This should be very simple using the whereis command to query the client IP address in the inbuilt GeoIP database: 


 https://devcentral.f5.com/wiki/iRules.whereis.ashx
when CLIENT_ACCEPTED {

if {not ([whereis [IP::client_addr] continent] eq "NA")}{
reject
}
}

Aaron