For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Aug 20, 2012

Block Direct Access to website

Afternoon,     I could do with a bit of guidance please.     I have a front end webserver, load-balanced on LTM, and a link on this webserver to another external facing webserver, also loa...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 20, 2012
The Referer header will start with a protocol like http:// or https://. You could try something like this to be more specific: 


when HTTP_REQUEST {
  switch -glob [string tolower [URI::host [HTTP::header "Referer"]]] {
    "www.mywebsite.com"
    "www.contentwebsite.com" {
       Allow Request to go through...
    }
    "" {
      HTTP::respond 200 content ""
      log local0 "Blank Referer from IP: [IP::client_addr]"
    }
    default {
      HTTP::redirect [HTTP::header "Referer"]
      log local0 "Blocked Referer: [HTTP::header value Referer] from IP: [IP::client_addr]"
    }
  }
}

Aaron