Forum Discussion

Craig_13881's avatar
Craig_13881
Icon for Nimbostratus rankNimbostratus
Jul 25, 2011

Return DNS replies to specific clients

I'm trying to return DNS replies to only a couple of different subnets. If the request comes in from anything else, I'd like to ignore it, or return a bogus response. Trying to get this to work, but...
application delivery
dev
devops
iRules
Ryan_Paras_7933's avatar
Ryan_Paras_7933
Icon for Nimbostratus rankNimbostratus
Jul 26, 2011
After getting some inspiration from this thread ... http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/1177010/showtab/groupforums/Default.aspx

 

 

Why not make a region with your IPs you want to allow resolution from, call it GOODIPS, and then try this:

 

when DNS_REQUEST {

 

if { [matchregion ldns GOODIPS]}{

 

pool Good_Pool

 

}

 

else{

 

pool Bad_Pool

 

}

 

}