Forum Discussion
Fastidious
Altostratus
AltostratusHelp with iRule
Good day all! I have the following iRule: when HTTP_REQUEST {
if { ([HTTP::host] eq "lists.example.com") and ([HTTP::uri] eq "/cgi-bin/wa?INDEX" || [HTTP::uri] eq "/cgi-bin/wa?MOD" || [HTTP::uri...
You can negate that second IF as well to avoid the else
when HTTP_REQUEST priority 500 { if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) && !(([HTTP::host] eq "lists.example.com") && ([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*")) } { HTTP::redirect "https://www.google.com" } }
FastidiousAltostratus
AltostratusOr this, rather:
when HTTP_REQUEST priority 500 {
if { ![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"] } {
if { ([HTTP::host] eq "lists.example.com") && ([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*") } {
return
} else {
HTTP::redirect "https://www.google.com"
}
}
}I know we are close, so I am not certain on how to "wrap it up". 😅
JRahm
Admin
AdminYou can negate that second IF as well to avoid the else
when HTTP_REQUEST priority 500 {
if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) &&
!(([HTTP::host] eq "lists.example.com") && ([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*")) } {
HTTP::redirect "https://www.google.com"
}
}
- Fastidious
Did you miss the ! on `!([HTTP::uri]...`?
- JRahm
looks like I just put it in the wrong place! Updated above.
- Fastidious
JRahmso, this is "working":
when HTTP_REQUEST priority 500 { if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) && (([HTTP::host] eq "lists.example.com") && !([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*")) } { HTTP::redirect "https://www.google.com" } }But images are all broken. It is creating a weird CORS/redirect problem
- JRahm
might be either a missing use case or the logic is slightly off. If use add the else back in and add return to that block does it fix?
- Fastidious
I had to account for more, and there are other URIs within the page, and those will be blocked because to not match the glob. So:
when HTTP_REQUEST { if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) && (([HTTP::host] eq "lists.example.com") && !([HTTP::uri] matches_glob "/cgi-bin/wa?SUBED1*") && !([HTTP::uri] matches_glob "/archives/images/*")) } { HTTP::redirect "https://www.google.com" } else { return } }