For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Net_Admin_24240's avatar
Net_Admin_24240
Icon for Nimbostratus rankNimbostratus
Jul 27, 2006

block public access allow private

I want to block access to URL's from any public address but allow access if the client initiates the connection using a private address.     For example: block access to http://mycompany.com/De...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 28, 2006
A couple of quick, related notes:

 

 

To create datagroups in the GUI, go to Local Traffic >> iRules >> Datagroups. Add the URI's as strings. Add the IP addresses/networks as addresses.

 

 

The rule basically checks to see if the requested URI starts with any of the URIs in the second datagroup. If the requested URI doesn't match, the second comparison for IP address shouldn't be made and the request will be handled by the pool configured on the VIP. If the URI does start with one of the protected URIs, the client IP address is compared with the internal hosts/networks datagroup. If there isn't a match there, the request is dropped.

 

 

Aaron