Blocking IP's

There are several different ways. However, we there are people in the forum that have done this. Here is a path to the forumn

 

 

 

http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/afv/topic/aft/1174760/aff/5/showtab/groupforums/Default.aspx

 

 

 

I hope this helps

 

Bhattman

You'll want to look at the drop or reject command in conjunction with IP::client_addr, most likely:

 

 

http://devcentral.f5.com/wiki/iRules.drop.ashx

 

http://devcentral.f5.com/wiki/iRules.reject.ashx

 

http://devcentral.f5.com/wiki/iRules.IP__client_addr.ashx

 

 

And yes, Bhattman is right, there are lots of examples floating around. :)

 

 

Colin

If you have a set of client IPs you want to block, you could add them to an address type data group and then use the class command to check the client IP:

 

 

http://devcentral.f5.com/wiki/iRules.class.ashx

 

 

Here's an example:

 

http://devcentral.f5.com/wiki/iRules.AccessControlBasedOnNetworkOrHost.ashx

 

 

Aaron