For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

benoit_9199's avatar
benoit_9199
Icon for Nimbostratus rankNimbostratus
Jan 16, 2018

Blacklisting HTTP Trafic iRule "leak" some matching requests to the backend servers

Hi, Suddenly having the need to add some per-referer filtering capabilities to our setup i created the following iRule, based on our IP blacklist iRules: when HTTP_REQUEST { Check if refere...
application delivery
iRules
LTM
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jan 17, 2018

Hello Benoit,

 

"event disable all" it is necessary? do you have others irule who uses the same event on the same vs?

 

because the risk that there may be, if you are redirecting the client back to the same virtual server, you may face situations where the client uses the same connection. This in turn means no further events will be executed, because of disabling all events for that given connection.

 

and therefore your restriction does not work...

 

Regards