Forum Discussion
Simon_Blakely
Employee
when HTTP_REQUEST {
if { [class match [IP::client_addr] equals DG1-BLOCKED-SUBNETS]} {
if { not ([class match [HTTP::uri] equals DG2-ALLOWED-URIs]) } {
drop
}
}
}
You were missing a [ class match
ant77
Apr 07, 2020Cirrostratus
Thanks! Appreciate your help...
Quick question, since the statement "drop" is there based on the condition in the data group needing to be met, will this drop traffic for all other traffic (regular traffic) outside of that condition (subnets and URIs) in the data group.? I just don't want this to drop our regular traffic...