For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

istockchris_390's avatar
istockchris_390
Icon for Nimbostratus rankNimbostratus
Aug 18, 2010

Unsuccessful matching against "address" data group

I'm trying to block IPs that show up in the X-Forwarded-For header, and I'm quickly finding out that the "Address" data group is very picky as to what you try to compare against it. The rule I tri...
application delivery
dev
devops
iRules
Colin_Walker_12's avatar
Colin_Walker_12
Historic F5 Account
Aug 18, 2010
If you're going to use the Address data group type, you'll need to clean the input a little bit to verify that you're using a valid address for a comparison, and only a single address, etc. If you're trying to compare single IPs, you could just as easily use the string type for the comparison which is a little more forgiving. The Address type allows for subnet matching and the like though, that can be very powerful.

 

 

Does that help?

 

 

Colin