Forum Discussion

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Jan 29, 2014

Will this iRule block a range of IP Addresses?

Will this iRule block the range of 150.70.173.40 through 150.70.173.99. Is there a better way to block a range of IP addresses?   when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals 15...
application delivery
devops
iRules
security
  • Vitaliy_Savrans's avatar
    Vitaliy_Savrans
    Jan 29, 2014

    Instead reject is better to use drop. Instead 150.70.173.40/24 is better to use 150.70.173.0/25 for blocking range 150.70.173.40 through 150.70.173.99

     

Vitaliy_Savrans's avatar
Vitaliy_Savrans
Icon for Nacreous rankNacreous

Instead reject is better to use drop. Instead 150.70.173.40/24 is better to use 150.70.173.0/25 for blocking range 150.70.173.40 through 150.70.173.99

 

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Jan 29, 2014
Vitaliy, thank you very much! I will make your suggested change.