Forum Discussion

Kevin_Nail's avatar
Kevin_Nail
Icon for Nimbostratus rankNimbostratus
Aug 29, 2013

How do I only allow access to certain folders from a few IPs but not others

I can create an data group for the approved IP list but how do I take that list and use it to allow access to folders. for example:   IP 1.2.3.4 can access   mysite.com/folder1 mysite.com/folde...
Kevin_Nail's avatar
Kevin_Nail
Icon for Nimbostratus rankNimbostratus
Aug 30, 2013

Thanks everyone!

 

I got it working by creating 2 data groups and an iRule (borrowed from some others)

 

when HTTP_REQUEST { if {([class match [string tolower [HTTP::path]] starts_with allowed_uriList]) and not ([class match [IP::client_addr] equals ips_allow])}{

 

log local0. "Untrusted IP ([IP::client_addr]) attempting to access secure path ([HTTP::uri])"

discard } else {

 

log local0. "Allowing connection from [IP::client_addr] to [HTTP::uri]"

} }