For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_5599_134300's avatar
Joe_5599_134300
Icon for Nimbostratus rankNimbostratus
May 03, 2016

How can you block/reject subdirectories only, with an irule?

I want to block only the subdirectory and not the default or parent.   This irule I found on Dev Central and some others I have been testing with will also apply the reject to anything before the ...
application delivery
iRules
security
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 03, 2016

Hello,

This irule should works for you :

when HTTP_REQUEST { 
    switch -glob [string tolower [HTTP::path]] { 
        "*/appsite1" { reject } 
        default {  do nothing } 
    } 
}
Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 03, 2016
just tested on my own lab the above irule and it works : /test is not rejected and /test/appsite1 respond with a TCP reset.