For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Christian_Becer's avatar
Christian_Becer
Icon for Nimbostratus rankNimbostratus
Jun 11, 2009

Data Group and URI

Hello to All and thanks in advance.

 

 

If there is a forum topic that can help me, please forward.

 

 

Basically I have websites behind the F5. I have certain affiliates that we want to allow or disallow traffic to our websites based on a Data Group.

 

 

Basically if we have an affiliate that we do not want to allow and they were not apart of the data group, they would not be allowed to link to our site.

 

 

http://www.website.com/?cpao=300&cpag=13733&kbid=13733

 

 

The affiliate ID is 13733 after kbid=.

 

 

What can I do to not allow this link to connect to the website. If I could log it, that would be great also.

 

 

I thank everyone for their assistance.

 

 

 

application delivery
dev
devops
iRules

1 Reply

  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Jun 12, 2009

    I suppose you can do something similar to

    NOTE: This is untested 

     
 when HTTP_REQUEST { 
   if { not [matchclass $::affiliateid eq [findstr [HTTP::query] "kbid="]]] } 
         reject 
      }

    You have to define the data group and fill it with your affiliate white list

    The reject will simply cause the connection to be rejected, returning a reset as appropriate http

    Hope this helps

    CB