For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cleiton_Lobo_de's avatar
Cleiton_Lobo_de
Icon for Nimbostratus rankNimbostratus
Sep 21, 2019

Allow access to URI-based Internet specific URL

I am trying to develop an irule whereby access to a specific URL is allowed only when a specific URL is presented .   The URL specifies abc.domain.com/marketplace must be available for external a...
ASM Advanced WAF
iRules
security
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Sep 21, 2019

Hi,

Can you try this iRule?

when HTTP_REQUEST {
	if { [HTTP::host] equals "abc.domain.com"} {
		if { not ([string tolower [HTTP::uri]] starts_with "/marketplace") } {
			switch -glob [IP::client_addr] {
				"10.*" -
				"192.168.*" -
				"172.16.*" -
				"172.17.*" -
				"172.18.*" -
				"172.19.*" -
				"172.20.*" -
				"172.21.*" -
				"172.22.*" -
				"172.23.*" -
				"172.24.*" -
				"172.25.*" -
				"172.26.*" -
				"172.27.*" -
				"172.28.*" -
				"172.29.*" -
				"172.30.*" -
				"172.31.*" {
					# log local0. "Host: [HTTP::host] Uri: [HTTP::uri] ClientIP: [IP::client_addr]"
				}
				default {
					reject
				}
			}
		}
	}
	else {
		reject
	}
}