Forum Discussion
Net_Admin_24240
Nimbostratus
Nimbostratusblock public access allow private
I want to block access to URL's from any public address but allow access if the client initiates the connection using a private address.
For example: block access to http://mycompany.com/De...
Net_Admin_24240Nimbostratus
NimbostratusI am running BIG-IP 9.1.2 Build 40.6. Do I need to reference the datagroups in the rule besides in the "if" statement? I have not been able to discard traffic using the following:
class AdminDebugURI {
"www.mycompany.com/Debug/Debug/ecv.jsp"
when HTTP_REQUEST {
if { [matchclass [HTTP::uri] contains $::AdminDebugURI ] and (not [matchclass [IP::remote_addr] equals $::private_net ]) } {
log local0. "client: [IP::remote_addr] requested [HTTP::host][HTTP::uri] and was dropped"
discard
}
}
If I reference the URI & private IP address string as text in the rule I get "LOGIN: Re-starting tmm" when using tcpdump to filter on the public IP address.
when HTTP_REQUEST {
if { [matchclass [HTTP::uri] contains "www.mycompany.com/Debug" ] and (not [matchclass [IP::remote_addr] equals "10.10.10.10" ]) } {
log local0. "client: [IP::remote_addr] requested [HTTP::host][HTTP::uri] and was dropped"
discard
}
}
