For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

arjun_ankathil_'s avatar
arjun_ankathil_
Icon for Nimbostratus rankNimbostratus
Apr 08, 2010

HTTP traffic deny - not working.

A request for test.test.com/BluePortServlets/PaymentPortal on HTTP was requested to be dropped , Configured below iRule and applied to VS , however traffic is still reached.     rule test_payme...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Apr 08, 2010
Hi Arjun,

Are you applying this iRule to a port 80 HTTP VIP? If so, can you try this? 

when HTTP_REQUEST {
   log local0. "[IP::client_addr]:[TCP::client_port]: [HTTP::method] request to [HTTP::host][HTTP::uri]"
   if {[HTTP::path] contains "BluePortServlets/PaymentPortal" }{
      log local0. "[IP::client_addr]:[TCP::client_port]: Dropping request to [HTTP::uri]"
      drop
   }
}

Once you're done testing, you can comment out the debug logging.

Aaron