Forum Discussion

nrelihan_68143's avatar
nrelihan_68143
Icon for Nimbostratus rankNimbostratus
Jul 12, 2011

Blacklist iRule Chrome browser Problem

Hey all,

 

 

I have an issue when I do a scan on the http payload using chrome I can't find the following value "reqID=doLogin".

 

When running in ie or Firefox I have no such issue.

 

If I don't look for this payload info, and just a post method chrome has no issue with the iRule.

 

if { [HTTP::payload] contains "reqID=doLogin" && [HTTP::method] equals "POST" }

 

Also, if I simply just try and write the whole HTTP::payload value to a log it doesn't seem to be catching it in Chrome.

 

 

When this iRule is assigned to the Virtual Server (iBB in this case):

 

1.Check any user that attempts a login.

 

2.Check if the user is on either the Blacklist or Watchlist based upon that user IP after attempted login.

 

3.If the user is on the Balcklist, log and deny the user access to progress.

 

4.If the user is on the Watchlist, log and allow the user access to progress.

 

 

Browser version: IE 8 - Firefox 5.0 - Chrome 12.0.742.91

 

 

Has anyone had issues with Chrome before?

 

 

Thanks for your time.

 

 

Neil

 

application delivery
dev
devops
iRules
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Jul 13, 2011
    Hi Paul,

    Sure, I added this to the example above: 

    
when HTTP_REQUEST {

   log local0. "UA: [HTTP::header User-Agent]"
   log local0. "Current payload: ([HTTP::payload length] bytes) [HTTP::payload]"
   ...

    I added the same block to the HTTP_REQUEST_DATA event so you can compare before and after collecting the payload.

    Aaron
  • Colin_Walker_12's avatar
    Colin_Walker_12
    Historic F5 Account
    Jul 13, 2011
    Keep in mind that with a large payload that's going to be dumping a LOT to the log, which may induce a small amount of latency in the connection.

     

     

    Colin
  • nrelihan_68143's avatar
    nrelihan_68143
    Icon for Nimbostratus rankNimbostratus
    Jul 13, 2011
    Ok Thanks Aaron,

     

    I'll input this logging function into my code.

     

    I'll compare what Chrome give me in the first payload packet against what I get for IE.

     

    If I dont see this string in the frist packet, I can go from there.

     

     

    Neil

     

     

    Ill keep that in mind Colin, thanks.