Forum Discussion
winifred_corbet
Nimbostratus
Nimbostratusallow access to URL by specific IP range - all others rejected
For a specific URL I need to allow access to URL only to our internal IP range, all other IP addresses need to be rejected.
Something along these lines, but clearly this is not correct. Can...
Michael_YatesNimbostratus
NimbostratusIf you need to be extremely specific you can have it check the URI as well.
when HTTP_REQUEST {
if { [HTTP::host] equals "www.website.com" and [HTTP::uri] equals "/somethingspecific/index.html" and [matchclass [IP::remote_addr] equals $::PoolOfAllowedAddresses ]) } {
pool poolofallowedservers
}
else {
reject
}
}
If you want exclusive over inclusive you can make a few modifications:
when HTTP_REQUEST {
if { [HTTP::host] equals "www.website.com" and [HTTP::uri] equals "/somethingspecific/index.html" and !([matchclass [IP::remote_addr] equals $::PoolOfAllowedAddresses ]) } {
reject
}
else {
pool poolofallowedservers
}
}
- Ahmad_Ghazal_17Hi, what the following line means, and what it's used for? pool poolofallowedservers
- nitass
Employee
poolofallowedservers is pool name. the command does send traffic to that pool.
