For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

haxzorian_35595's avatar
haxzorian_35595
Icon for Nimbostratus rankNimbostratus
Apr 01, 2017

Blocking admin uri via IP address and keyword?

Hello All, Is there a proper way to block access to admin URIs using a a keyword and IP address? Such as, if the request comes from 192.168.0.0/16 space and contains /platform/* allow the connecti...
BIG-IP
iRules
security
Snl's avatar
Snl
Icon for Cirrostratus rankCirrostratus
Apr 02, 2017

Try below

 

1)Created Data group list as allowed-host and added the IP 192.168.0.0/16

 

2) created below irule and called the data group list allowed-host

 

Code/

 when HTTP_REQUEST {

if { ( [string tolower [HTTP::uri]]  contains "/platform/*" ) } {

    if { not ( [class match [IP::client_addr] equals allowed-host] ) } {

        reject
    }           
}       }