irule to block file types from extenal client IP

Forgot to add that with a data group you shouldn't see much of a hit as the data group size grows. See Joe's article on this:

 

 

Comparing iRule Control Statements

 

https://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1086424/Comparing-iRule-Control-Statements.aspx

 

 

Aaron