For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nompang's avatar
Nompang
Icon for Altocumulus rankAltocumulus
Nov 17, 2022

Access rejected because it points to reserved address (Virtual Server ip or Self IP)

HI Expert ,  i have issue with F5 APM when i try to create a portal that contain IP address of (Virtual Server or Self ip ) i always get block by ACL and log state that :  Access rejected because ...
application delivery
security
Vanderlei's avatar
Vanderlei
Icon for Altostratus rankAltostratus
Jan 06, 2023

i am experiencing the same behavior in my environment, have someone figure out on that issue? I didn't identify the reason

Nompang's avatar
Nompang
Icon for Altocumulus rankAltocumulus
Jan 06, 2023

not yet bro , i think it is bug.

try to downgrade the version , as i also use the latest one and face this issue.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jan 08, 2023

    Vanderlei which TMOS version? do you see something in the apm log at that moment?

    If you are sure about a bug, please open a support ticket, F5 support should be able to get to the bottom of this quite quickly.

  • Vanderlei's avatar
    Vanderlei
    Icon for Altostratus rankAltostratus
    Jan 08, 2023

    we just had upgraded 2 months ago from v13.1x to v15.1.8 😞

  • Vanderlei's avatar
    Vanderlei
    Icon for Altostratus rankAltostratus
    Jan 08, 2023

    Im not sure it is a bug, but the current version of Big IP is 15.1.8 and in APM see logs like:

    Jan 7 03:47:07 <bigiphostname> notice tmm1[22602]: 01490585:5: /Common/<access policy name>:Common:71818fdc: Access to <external or internal url> rejectedbecause it points to reserved address.

    Im not sure but the <external or internal url> is one rewrite try by Portal Rewrite / iRULE

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Jan 09, 2023

    Not really sure what you mean with "Im not sure but the <external or internal url> is one rewrite try by Portal Rewrite / iRULE"

    But do these URLs point to the a Self IP or localhost (127.0.0.1) on the BIG-IP? As mention in the K article what does dev tools show?

    Ill point to F5 support again, they can do a remote session with you and much easier look into this.