Conditional logic based on source IP

So I've created an iRule but it's not quite working. Here's it is:

 

 

when HTTP_REQUEST {

 

if {[matchclass [HTTP::uri] contains $::cm2prod_filtered_URI] and (not [matchclass [IP::client_addr] eq $::corporate_external_net])}{

 

discard

 

}

 

}

 

 

I've got a data group that contains a list of several line items. If any of the strings appears in the URI and the source IP is not the corporate network, then the traffic should be dropped.

 

 

Here's the data group for the URI strings to match:

 

 

/init/

 

/msg/

 

/debs/

 

/amsg/

 

/web/

 

/catalogAdmin/

 

/visualModeler/

 

/attributeMgr/

 

/productMgr/

 

/pricingMgr/

 

/enterpriseMgr/

 

/tokenIF/

 

/customerSegmentation/

 

 

The data group for the network addresses is a simple list of our external corporate firewall IPs.

 

 

Any idea why this isn't working and how to troubleshoot?

 

 

Thanks!

 

B