For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 24, 2014

Here's another option:

when HTTP_REQUEST {
    switch [string tolower [HTTP::host]] {
        "img.domain.com" {
            switch -glob [string tolower [HTTP::uri]] {
                "/path2/*" -
                "/path3/*" {
                    return
                }
                default {
                    HTTP::respond 403
                }
            }
        } 
        default {
            if { not ( [string tolower [HTTP::uri]] starts_with "/path1/" ) } {
                HTTP::respond 403
            } else {
                return
            }
        }
    }
}