For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tnastars_92934's avatar
tnastars_92934
Icon for Nimbostratus rankNimbostratus
Feb 02, 2010

Help With IRule to limit access via an address data group

Hello,     I have created the below iRule. I am trying to limit access to a URL based on a specific URI, but allow all traffic to any other URI going to the virtual server. My main questio...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Feb 09, 2010
Hi Tom,

That's correct. What are the symptoms of the problem? Can you add logging to the iRule to see what's happening? 

 
 when HTTP_REQUEST { 
  
    log local0. "[IP::client_addr]:[TCP::client_port]: [HTTP::method] to [HTTP::host][HTTP::uri]" 
  
    if { [HTTP::path] starts_with "/foo/"} { 
  
       log local0. "[IP::client_addr]:[TCP::client_port]: Matched path check" 
  
       if { not [matchclass [IP::client_addr] equals $::foo_IP]} { 
  
          log local0. "[IP::client_addr]:[TCP::client_port]: Blocking request" 
          HTTP::respond 403 content "403 - Forbidden" 
       } 
    } 
 }

Aaron