For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Peter_Milanese_'s avatar
Peter_Milanese_
Icon for Nimbostratus rankNimbostratus
Jun 30, 2005

HTTP_REFERER?

Greetings-     Our intranet is partially exposed to the internet. I'd like to be able to do a referer check for our search appliance (and redirect it out if no match). I cannot find anythin...
application delivery
dev
devops
iRules
Peter_Milanese_'s avatar
Peter_Milanese_
Icon for Nimbostratus rankNimbostratus
Aug 07, 2006
Initial hits would not have a referer, and it is possible in some browsers to configure it not to send referers. All in all, unless you are in a controlled anvironment, using referer as a decision maker may not be as reliable as you'd like. I would not depend on it for public sites. This does not mean that all should be empty though. Are you certain that the configuration on the web server is correct?