Forum Discussion
tnastars_92934
Nimbostratus
NimbostratusHelp With IRule to limit access via an address data group
Hello,
I have created the below iRule. I am trying to limit access to a URL based on a specific URI, but allow all traffic to any other URI going to the virtual server. My main questio...
hoolio
Cirrostratus
CirrostratusThat should work to send all traffic you don't send an HTTP response to from the iRule to the VIP's default pool.
But the problem with that is that an attacker could obfuscate their request for /Foo/ using several directory traversal or encoding methods. Check the post I linked to in my first reply for details on that.
Aaron
