when HTTP_REQUEST {
switch -glob [HTTP::host] {
"homesearchcar.com" -
"*globe7.com" -
"www.globe7.com" -
"*.xchecker.net" -
"*.adserverplus.com" -
"ad.adorika.com" -
"*.adorika.com" -
"www.mmadsgadget.com" -
"*mmadsgadget.com" {
reject
}
}
}
I put that exact iRule in, and yet in my Apache logs I still see:
142.4.127.133 - - [02/Feb/2013:10:52:32 -0500] "GET http://www.mmadsgadget.com/t?id=58f19df1-19aa-85e4-89f0-41dc9ffe2e4d&size=300x250 HTTP/1.0" 302 219 "http://www.adeentertainment.com/?tag=celebrity-summer" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 98; DigExt; Hotbar 2.0)"
142.4.117.74 - - [02/Feb/2013:10:52:53 -0500] "GET http://www.mmadsgadget.com/t?id=cbf37bc9-5698-f7c4-0938-5ca431da2d2d&size=300x250 HTTP/1.0" 302 219 "http://www.homesearchcar.com/?p=573" "Mozilla/4.61 (Macintosh; I; PPC)"
142.4.127.53 - - [02/Feb/2013:10:53:09 -0500] "GET http://ad.globe7.com/st?ad_type=iframe&ad_size=300x250§ion=3925068&pub_url=${PUB_URL} HTTP/1.0" 302 219 "http://www.financemessage.com/" "Mozilla/4.0 (compatible; MSIE 5.5; Windows 98; Alexa Toolbar)"
142.4.127.133 - - [02/Feb/2013:10:53:12 -0500] "GET http://www.mmadsgadget.com/t?id=58f19df1-19aa-85e4-89f0-41dc9ffe2e4d&size=300x250 HTTP/1.0" 302 219 "http://www.adeentertainment.com/?tag=naughty-but-nice-with-rob-shuter" "Mozilla/4.0 (compatible; MSIE 5.0; Windows 95; Alexa Toolbar)"
192.74.234.53 - - [02/Feb/2013:10:54:23 -0500] "GET http://ad.globe7.com/st?ad_type=iframe&ad_size=300x250§ion=3596356&pub_url=${PUB_URL} HTTP/1.0" 302 219 "http://www.today-entertainment.com/?p=17" "Mozilla/4.76 (Macintosh; U; PPC)"
142.4.117.73 - - [02/Feb/2013:10:55:25 -0500] "GET http://www.mmadsgadget.com/t?id=f6c8695c-9d1c-51e4-fd33-881ee3a7ee58&size=160x600 HTTP/1.0" 302 219 "http://www.homesearchcar.com/?cat=1864" "Mozilla/4.0 (compatible; MSIE 4.01; Windows 98)"
192.74.234.155 - - [02/Feb/2013:10:55:50 -0500] "GET http://ad.adorika.com/st?ad_type=ad&ad_size=300x250§ion=3551001&pub_url=${PUB_URL} HTTP/1.0" 302 219 "http://www.movegameface.com/index.php?option=com_yoflash&view=game&id=highway-traffic&Itemid=55" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Alexa Toolbar)"
No matter what I do, even if I use this iRule:
when CLIENT_ACCEPTED priority 10 {
if { [class match [IP::client_addr] equals blockredirects] } {
reject
}
}
and blockredirects Datagroup has many /27 and /19 networks in them:
142.4.96.0/255.255.224.0
142.4.117.73
142.4.117.75
142.4.127.133
142.4.127.131
142.4.127.53
etc. etc...
They still keep coming through on my Apache Server logs......
Is there any way to stop these from showing in Apache. It seems that my LTM-3400 running 10.2.0 is just ignoring all iRules for these
domains....and IP Addresses.....
Is there anything I need to add to the HTTP profile: http ?
Is there a better iRule to use for these GET requests?