Forum Discussion

MustphaBassim's avatar
MustphaBassim
Icon for Cirrus rankCirrus
Mar 23, 2024

block any URI with status 404 or 403

Hello Dears   i want to create irule that block any traffic come to server with status would be 404 or 403 so any suggestion please?   Bests
application delivery
  • Daniel_Wolf's avatar
    Daniel_Wolf
    Icon for MVP rankMVP
    Mar 25, 2024

    some solutions

    1. respond with HTTP 200

    when HTTP_RESPONSE priority 500 {
    if { [HTTP::status] == 403 || [HTTP::status] == 404 } {
        HTTP::respond 200 -version auto content {<html><head><title>Apologies</title></head><body>Access to this page is currently not possible.</body></html>} noserver
    }   
}

    2. respond with HTTP 204

    when HTTP_RESPONSE priority 500 {
    if { [HTTP::status] == 403 || [HTTP::status] == 404 } {
        HTTP::respond 204 -version auto noserver
    }   
}

    3. respond with TCP reset

    when HTTP_RESPONSE priority 500 {
    if { [HTTP::status] == 403 || [HTTP::status] == 404 } {
        reject
    }   
}

     

    Paulius - I think your suggestions won't work with dynamically generated URLs.

    • Paulius's avatar
      Paulius
      Icon for MVP rankMVP
      Mar 26, 2024

      Daniel_Wolf you are absolutely correct. Blocking before the server even knows what the request is to respond with a 403 or 404 isn't really something that's possible I don't believe, at least on the initial client request. Your option of modifying the response is the best alternative but still allows the request to make it to the pool member. I think in this instance we really need to know the reason for blocking these requests at the F5 rather than the server so we can come up with the appropriate solution for MustphaBassim but we shall see what they come back with.