For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

maximillean_953's avatar
maximillean_953
Icon for Nimbostratus rankNimbostratus
May 27, 2014

i write with not it applies true

when HTTP_REQUEST { if { ([lindex [split [HTTP::path] "/"] 2] contains "control" ) or ( [lindex [split [HTTP::path] "/"] 3] contains "control" ) or ( [lindex [split [HTTP::path] "/"] 1] contain...
application delivery
devops
iRules
maximillean_953's avatar
maximillean_953
Icon for Nimbostratus rankNimbostratus
May 28, 2014

Ok its fixed by local f5 guy by adding event disable all and return right after reject.And then http::respond doesnot pass reject anymore.

when HTTP_REQUEST { 
    if { ([lindex [split [HTTP::path] "/"] 2] contains "control" ) or ( [lindex [split [HTTP::path] "/"] 3] contains "control" ) or ( [lindex [split [HTTP::path] "/"] 1] contains "sql" ) and ![class match [IP::client_addr] eq ss_allowed_address] } {
reject
event disable all
return
 }
}