Forum Discussion

Emad's avatar
Emad
Icon for Cirrostratus rankCirrostratus
Nov 26, 2013

Allow specific URI from specific IP's in data group

I have data group class which contains IP Address of my network, i have to restrict some URI's to be access only from my network. i am using this Irule but it is not working for me , earlier i was ab...
application delivery
devops
iRules
Stefan_Klotz's avatar
Stefan_Klotz
Icon for Cumulonimbus rankCumulonimbus
Nov 26, 2013

Hi,

I didn't see any logical issue here, can you insert some log statements in each if-block, to verify if your request will be catched as expected.

For the moment I see two possibilities:

1. The URI isn't matching (maybe you can try "starts_with" or "contains")

2. The clientIP isn't matching your entries of the DGL

Please try this one:

if { ([HTTP::uri] eq "/abc/db") or ([HTTP::uri] eq "/abc/cd") } {
        log local0. "URI matched: [HTTP::uri]"
        if { not [class match [IP::client_addr] equals myAddresses] } {
            log local0. "IP matched: [IP::client_addr]"
            reject
        }
    }

Ciao Stefan 🙂