Forum Discussion

refra_151287's avatar
refra_151287
Icon for Cirrus rankCirrus
May 23, 2017

Block Smuggling HTTP Request

Hello, I'm trying to detect smuggling Request, but all my solutions failed, i tried to disable Pipeline option @ HTTP Profile, also tried an old iRule to detect HTTP header counts but also didn't worked it seemsed the header count is "1", so appreciate if you have good idea to block these requests noting this behavior is changeable, below screen for request... shot:

 

application delivery
http
iRules
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    May 24, 2017

    Wouldn't this fix the problem:

    when HTTP_REQUEST {
    if { [ llength [HTTP::header values Content-Length] ] > 1 } {
        log local0. "Multiple content-length headers detected: [HTTP::header values Content-Length] : Request dropped"
        drop
    }
}

    ?

    [Edited]