IPS ban IP - forwardedfor

[M4x1_SG]

Dear all,

I have a dude,

How I can ban IPs from the "forwarded-for" fields from IPS?

[ebilcari]

Basically you need to create a custom IPS signature refer to the guide or this article and apply it to an IPS profile.

[M4x1_SG]

Ebilcari, thank you for your answer..

I do not understand, how i can block a ip address from the "forwardedfor" field with the IPS Signatures when their function (the signature) is block specific attacks with a custom signature ?