Difference between revisions of "Block IP"
From Tech-Wiki
(Created page with "Category:F5 Networks '''Back to iRules''' # first, create a data group of type IP addr if { [class match [IP::remote_addr] equals ip_blacklist] }...") |
|||
| Line 2: | Line 2: | ||
'''[[F5 Networks#iRules|Back to iRules]]''' | '''[[F5 Networks#iRules|Back to iRules]]''' | ||
| − | + | In order to block (or allow) connections based on static IP, or a data group, first, create a data group of type IP addr then use the code below (use 'not' if you want to allow instead) | |
| + | |||
if { [class match [IP::remote_addr] equals ip_blacklist] } { | if { [class match [IP::remote_addr] equals ip_blacklist] } { | ||
reject | reject | ||
| − | |||
| − | |||
} | } | ||
Revision as of 17:20, 28 March 2021
In order to block (or allow) connections based on static IP, or a data group, first, create a data group of type IP addr then use the code below (use 'not' if you want to allow instead)
if { [class match [IP::remote_addr] equals ip_blacklist] } {
reject
}
Or
when CLIENT_ACCEPTED {
if { [IP::addr [IP::client_addr] equals xx.xx.xx.xx/xx] } {
reject
}
}