drop any request that has a '~' in it

This should cover it;

when HTTP_REQUEST {
 if { string tolower [HTTP::uri] contains “~” } {
   Drop the request and send a TCP RST to the client
   log local0. “Rejected request for [HTTP::host][HTTP::uri]
   reject
  }
 else {
  Stop processing the iRule for this event here
  return
 }
}

Correction (was missing some []);

when HTTP_REQUEST {
 if { [string tolower [HTTP::uri]] contains “~” } {
   Log the requested URL for reference
   log local0. “Rejected request for [HTTP::host][HTTP::uri]
   Drop the request and send a TCP RST to the client
   reject
  }
 else {
  Stop processing the iRule for this event here
  return
 }
}

Arrgghhh. Missed a " at the end of the log statement;

when HTTP_REQUEST {
 if { [string tolower [HTTP::uri]] contains “~” } {
   Log the requested URL for reference
   log local0. “Rejected request for [HTTP::host][HTTP::uri]”
   Drop the request and send a TCP RST to the client
   reject
  }
 else {
  Stop processing the iRule for this event here
  return
 }
}

Hi Steve

 

 

thanks for that will test this next week

 

 

have a good weekend

 

 

Jim

You're welcome, you too.