For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RKC_260787's avatar
RKC_260787
Icon for Nimbostratus rankNimbostratus
Jul 24, 2018

HTTP Referer headers

I have a requirement to check HTTP Referer headers and restrict it to base URL and anything else should be denied .   Example -- URL -- https://123test123.com Referer Header should be only https:...
iRules
LTM
security
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Jul 24, 2018
when HTTP_REQUEST {
    set referer [string tolower [HTTP::header value "Referer"]]
    
     Reject if Referer is not blank and does not start with https://123test123.com/
    if {($referer != "") && !($referer starts_with "https://123test123.com/")} {
        log local0.info "Rejecting request to [HTTP::uri] with Referer $referer"
        reject
    }
}