For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rafish_129330's avatar
Rafish_129330
Icon for Nimbostratus rankNimbostratus
May 22, 2018

help with irule

Hi,   I need to write irule that 1. drop connection to uri that contain "wp-admin" "login" "mydb" from specific ip address 2. allow access to uri that contain "admin-ajax.php"   This is the ir...
iRules
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
May 22, 2018

Hi,

you can begin with this irule then let me now if you need some update:

when HTTP_REQUEST {
    if { !([IP::client_addr] equals "10.0.0.8" ) } {

        if { ([string tolower [HTTP::uri]] contains "admin" || [string tolower [HTTP::uri]] contains "login") && !([string tolower [HTTP::uri]] contains "admin-ajax.php") } {
            drop
        }

    } 
}

Of course change "10.0.0.8" by your IP.