For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Svevak_211593's avatar
Svevak_211593
Icon for Nimbostratus rankNimbostratus
Feb 16, 2016

whitelist for IPs in iRule

Hello,   I would like to whitelist some IPs in an iRule. The IPs are defined in a datagroup.   Here is my code, but I'm not sure if this works...   when CLIENT_ACCEPTED { if { ([class ...
iRules
security
Svevak_211593's avatar
Svevak_211593
Icon for Nimbostratus rankNimbostratus
Feb 24, 2016

Thank you guys! I think it works this way:)

I got one more question. I would like to add Geoblocking to this iRule. But it doesn't work for me.

So Whitelist for one IP + Geoblocking:

when CLIENT_ACCEPTED {
        switch[ whereis [IP::client_addr] country ] {
            "DE" { set allowed 1 }
            "AT" { set allowed 1 }
            "CH" { set allowed 1 }
            "LI" { set allowed 1 }
            "LU" { set allowed 1 }
                default { set allowed 0 }
        }
                elseif {
                         if {
            [matchclass [IP::client_addr] equals datagroup whitelistIP ] } {
            pool datagroup-whitelistIP
        }   
        else {
            reject
        }
    }

Is this correct?