For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Net_Admin_24240's avatar
Net_Admin_24240
Icon for Nimbostratus rankNimbostratus
Jul 27, 2006

block public access allow private

I want to block access to URL's from any public address but allow access if the client initiates the connection using a private address.     For example: block access to http://mycompany.com/De...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 31, 2006
Hi,

If you want to compare just a single IP address, you should use [IP::addr [IP::remote_addr]]. If you want to test to see if a client request made from 10.10.10.10 for a URI that contains "debug" is dropped, you can use a rule like this:


when HTTP_REQUEST {
   if { [string tolower [HTTP::uri]] contains "debug" ] and [IP::addr [IP::remote_addr] equals 10.10.10.10 ]) } {
      log local0. "client: [IP::remote_addr] requested [HTTP::host][HTTP::uri] and was dropped"
      discard
   }
}