Forum Discussion

Nick_Palmer_f5's avatar
Nick_Palmer_f5
Icon for Nimbostratus rankNimbostratus
Oct 24, 2013

Blocking a HTTP Verb/Method

Hello!   Could you please help me come up with a solution on suppressing/blocking a HTTP verb? Will iRule be a good option for this? A site we host was scanned by client which showed the TRACE met...
application delivery
devops
iRules
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 25, 2013

That should work, and you can actually shorten it:

when HTTP_REQUEST {  
    if { [string tolower [HTTP::method]] equals "trace" } {
        log local0. "Attempt by [IP::client_addr] with a forbidden HTTP verb: [HTTP::method]"            
        reject
    }
}