Forum Discussion

coreyva's avatar
coreyva
Icon for Nimbostratus rankNimbostratus
Apr 01, 2011

data group not matching

I'm writing an irule to deny logins from external users. I've tried to define a datagroup that contains allowed subnets, but have not been able to get it to match to an incoming address. See below. ...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Apr 01, 2011
That looks good. One small correction: you're missing the square braces around HTTP::path:

 

 

switch -glob [string tolower [HTTP::path]] {

 

 

Also be aware that it's really simple to bypass URI based checks like that on IIS:

 

 

http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/50/aft/30900/showtab/groupforums/Default.aspx31324

 

 

Aaron