Forum Discussion

Kevin_Nail's avatar
Kevin_Nail
Icon for Nimbostratus rankNimbostratus
Aug 29, 2013

How do I only allow access to certain folders from a few IPs but not others

I can create an data group for the approved IP list but how do I take that list and use it to allow access to folders. for example:   IP 1.2.3.4 can access   mysite.com/folder1 mysite.com/folde...
Joe_Pruitt's avatar
Joe_Pruitt
Aug 29, 2013

Assume data group is called allowed_ips, something like this should work:

when HTTP_REQUEST {
  switch -glob [HTTP::uri] {
    "/folder1*" -
    "/folder2*" -
    "/folder3*" {
      if { not [class match [IP::client_addr] equals allowed_ips] } {
        reject
      }
    }
  }
}