Forum Discussion

Thanushka_Wije1's avatar
Thanushka_Wije1
Icon for Nimbostratus rankNimbostratus
Feb 10, 2018

Http header

Hi   There is a requirment to write an iRule for below   To capture HTTP header of each request and only allow them if it has valid DNS header host section   Will below work?   Data-Gro...
application delivery
iRules
Thanushka_Wije1's avatar
Thanushka_Wije1
Icon for Nimbostratus rankNimbostratus
Feb 10, 2018

Unfortunately below iRule is not executing and generating TCL errors

 

when HTTP_REQUEST { if { [class match [HTTP::host] equals $::Valid_DNS] } {

 

accept } else { drop }

 

} My requirement is to mitigate host header redirection attacks (HTTP redirection protection), I'm running on 11.6.2 HF1, unfortunately not having ASM licence.

 

Any idea how can I achieve above using data-group and irule.