For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Howell_11's avatar
Chris_Howell_11
Icon for Nimbostratus rankNimbostratus
Aug 17, 2006

How DO I exclude an IP Address

I looked through the forum and could not find an example that would work for me.

 

 

Below is my current rule for redirection:

 

 

when HTTP_REQUEST

 

{

 

log local0. "Redirection to HTTPS!"

 

HTTP::redirect "HTTPS://testcase.college.edu/test/"

 

}

 

 

 

I need to exclude a single IP to continue using port 80. But want to insure all other traffic is redirected to use 443

 

 

SO somoehow I want all traffic except for 10.0.0.1 to use https

 

 

Thanks,'

 

 

Chris

17 Replies

  • Here is my rule. However I am getting an error saving the rule. Any ideas?

     

     

    THe error

     

    01070151:3: Rule [Tandem_redirect_http] error:

     

    line 3: [wrong args] [log local0. "Redirection to HTTPS!" HTTP:redirect "HTTPS://devcare.healthsystem.edu/idxweb/" ]

     

     

     

     

     

    when HTTP_REQUEST {

     

    if { not [matchclass [IP::client_addr] equals $::ecare_exceptions] } {

     

    log local0. "Redirection to HTTPS!" HTTP::redirect "HTTPS://devcare.healthsystem.edu/idxweb/" }

     

    }

     

     

     

     

    Any Ideas?

     

     

    THanks

     

    Chris
  • Ouch... what was the hotfix, if you don't mind my asking? And what other issues did it cause?
  • I think your issue is that there is no carriage return between your log and redirect commands. Try this:

    when HTTP_REQUEST { 
      if { not [matchclass [IP::client_addr] equals $::ecare_exceptions] } { 
        log local0. "Redirection to HTTPS!"
        HTTP::redirect "HTTPS://devcare.healthsystem.edu/idxweb/"
       }
    }
  • The hotfix I currently have applied is Hotfix-BIG-IP-9.2.3-CR65335.im. The only other issue with this version I have is that upgrades to the compact flash slot are unsuccessful. I have to use the HD1.x slots to get it installed. I had this same problem upgrading from 9.1.1 to 9.1.2.
  • iRule datagroups are not supported for GTM iRules at this time (per support.)
  • THanks guys, Updated code last night put in new irule works great. Thanks for the help.

     

     

    CHris