Blocking a URL except from specific IP addresses

To clarify:

If a user makes a request for www.domain.com/admin, deny them unless they are on your internal network (we'll say 10.0.0.1/24).

Correct?

If so, then you'd want something like:

when HTTP_REQUEST {
  if { [HTTP::uri] starts_with "/admin" } {
    if {[IP::client_addr] starts_with "10.0.0" } {
      pool http_pool
    } else {
      reject
    }
  }
}

This is, of course, an extremely simple example. If you wanted to add a bit more intelligence/flair, you could use a network range when doing the comparison, send a custom HTTP response, etc.

HTH,

Colin

Thanks to all! This has been a great help!