how to set iRule against DoS attack

Hi I just merged the Nimda and CodeRed scripts into one and check the syntax was ok on my LTM.

 

 

------------------------------

 

CodeRed and Nimda prevention

 

------------------------------

 

when HTTP_REQUEST {

 

if {([HTTP::uri] contains "default.ida") or ([HTTP::uri] matches_regex ".*cmd.exe*.") or ([HTTP::uri] matches_regex ".*root.exe*.") or ([HTTP::uri] matches_regex ".*admin.dll*.") }

 

{

 

log local0. "client: [IP::client_addr], requested [HTTP::host][HTTP::uri]"

 

discard

 

} else {pool livepool}

 

}

 

 

Heres the log info (Modified of course):

 

 

Rule CodeRed_And_Nimda_Attack HTTP_REQUEST: client: , requested www.abc.com/root.exe

 

 

What I can't tell is if anything is getting blocked.