Forum Discussion
CHRISTY_THOMAS
Cirrus
CirrusHow to restrict a url access from a specific two ip's
Hi, How to retsrict a url access from internet for a specific two ip's ! whether it can be achieved via LTM policy or via irule? logic that i have cretaed using irule given below: when HTTP_REQU...
CHRISTY_THOMASCirrus
Cirrus
only IPs 104.123.3.1 and 117.23.2.1 can acces to path "/abc/update". remainng Ip connections from internet towards acess path "/abc/update" should be droped/blocked
Thanks for confirming.
I made a few minor adjustments to fix syntax issues, but this should work:
when HTTP_REQUEST {
if { [HTTP::path] contains "/abc/update" and (([IP::addr [IP::client_addr] equals 104.123.3.1]) or ([IP::addr [IP::client_addr] equals 117.23.2.1])) } {
}
else {
reject
}
}- CHRISTY_THOMAS
i have checked in my application. while i am calling this irule in VS the other url's pertaining to the application also not loading in the browser
- CHRISTY_THOMAS
i have checked LTM logs also below error recieving:
tmm[9714]: 01220001:3: TCL error: /Common/UIp_TEST <HTTP_REQUEST> - invalid command name "if{/" while executing "if{[HTTP::path] contains "/uHi/upjateMobShSRrq" and (([IP::addr [IP::client_addr] equals 1XX.250.X0.X]) or ([IP::addr [IP::client_addr] equals 1XX.1XX..."
Try this:
when HTTP_REQUEST { if { [HTTP::path] contains "/abc/update" and !(([IP::addr [IP::client_addr] equals 104.123.3.1]) or ([IP::addr [IP::client_addr] equals 117.23.2.1])) } { reject } } }
