AskF5 | Manual Chapter: About Firewall Rule Addresses and Ports

About firewall rule addresses and ports

In a network firewall rule, you have several options for defining addresses and ports. You can use one or more of these options to configure the ports and addresses to which a firewall rule applies.

Note: You can use any combination of inline addresses, ports, address lists, and port lists in a firewall rule.

Any (address or port): In both Source and Destination address and port fields, you can select Any. This specifies that the firewall rule applies to any address or port.
Inline addresses: An inline address is an IP address that you add directly to the network firewall rule, in either the Source or Destination Address field. Addresses can be either IPv4 or IPv6, depending on your network configuration.
Address Lists: An address list is a preconfigured list of IP addresses that you add directly to the BIG-IP^® system. You can then select this list of addresses to use in either the Source or Destination Address field.
Inline ports: An inline port is a port that you add directly to the network firewall rule, in either the Source or Destination Port field. You can add a single port, or a contiguous port range.
Port lists: A port list is a preconfigured list of ports that you add directly to the BIG-IP system. You can then select this list of ports to use in either the Source or Destination Port field.

About address lists

An address list is simply a collection of IP addresses saved on the server. You can define one or more address lists, and you can select one or more address lists in a firewall rule. Firewall address lists can be used in addition to inline addresses, specified within a particular rule.

Creating an address list

Create an address list to apply to a firewall rule, in order to match IP addresses.

On the Main tab, click Security > Network Firewall > Address Lists. The Address Lists screen opens.
Click Create to create a new address list.
In the Name and Description fields, type the name and an optional description.
In the Addresses area, add and remove addresses.
- To add an address, type the address and click Add.
- To remove and address, select the address in the Addresses list and click Delete.
- To edit an address, select the address in the list and click Edit. The address is removed from the Addresses list and appears in the editing field. Make your changes to the address, and click Add.
Click Finished. The list screen is displayed, and the new item is displayed.

About port lists

A port list is simply a collection of port numbers saved on the server. You can define one or more port lists, and you can select one or more port lists in a firewall rule. Firewall port lists can be used in addition to inline ports, specified within a particular firewall rule.

Creating a port list

Create a port list to apply to a firewall rule, in order to match ports.

On the Main tab, click Security > Network Firewall > Port Lists. The Port Lists screen opens.
Click Create to create a new port list.
In the Name and Description fields, type the name and an optional description.
In the Ports area, add and remove ports.
- To add a single port, select Single Port, then type the port number, and click Add.
- To add a contiguous range of ports, select Port Range, then type the start and end port in the fields. Click Add to add the range of ports to the port list.
- To remove and address, Select the address in the Addresses list and click Delete.
- To edit a port entry, select the port or port range in the list and click Edit. The port or port range is removed from the Ports list and appears in the editing field. Make your changes to the port or range, and click Add.
Click Finished. The list screen is displayed, and the new item is displayed.

Applies To:

BIG-IP AFM

About firewall rule addresses and ports

About address lists

Creating an address list

About port lists

Creating a port list

Was this resource helpful in solving your issue?

Additional Comments (optional)

About F5

Education

F5 Sites

Support Tasks

Connect with us