For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ronniep_79067's avatar
ronniep_79067
Icon for Nimbostratus rankNimbostratus
Nov 17, 2009

blocking or dropping particular dns requests

I have a request to see if there is a way that we can block or deny requests to www.example.com. but allow example.com. The request is to actually block anything but example.com.      ...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 17, 2009
Citizen's example would check if the requested host is two dotted fields (example.com or co.uk). You could also explicitly check for a requested host of example.com and reject anything else: 

 
 when HTTP_REQUEST { 
  
     Check if requested host (set to lower case) is example.com 
    if {[string tolower [HTTP::host]] eq "example.com"}{ 
  
        Send an HTTP response 
       HTTP::respond 403 
  
        Reset the TCP connection 
       reject 
    } 
 }

Aaron