Forum Discussion

Nimbostratus

May 20, 2010

allow access to URL by specific IP range - all others rejected

For a specific URL I need to allow access to URL only to our internal IP range, all other IP addresses need to be rejected. Something along these lines, but clearly this is not correct. Can...

Cirrus

May 20, 2010

If you need to be extremely specific you can have it check the URI as well.


when HTTP_REQUEST {
    if { [HTTP::host] equals "www.website.com" and [HTTP::uri] equals "/somethingspecific/index.html" and [matchclass [IP::remote_addr] equals $::PoolOfAllowedAddresses ]) } {
        pool poolofallowedservers
    }
    else {
        reject
    }
}

If you want exclusive over inclusive you can make a few modifications:


when HTTP_REQUEST {
    if { [HTTP::host] equals "www.website.com" and [HTTP::uri] equals "/somethingspecific/index.html" and !([matchclass [IP::remote_addr] equals $::PoolOfAllowedAddresses ]) } {
        reject
    }
    else {
        pool poolofallowedservers
    }
}