For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gustavo_Lazarte's avatar
Gustavo_Lazarte
Icon for Nimbostratus rankNimbostratus
Feb 17, 2009

infinite url request

In a security audit we have find out that our webservers are receiving infinite URL requests like HTTP://xx.xx.xx.xx/YYYYYYYYYYYY..YYY. Is there a way put a limit in the URL requests?

 

 

Thanks
application delivery
dev
devops
iRules

1 Reply

  • hwidjaja_37598's avatar
    hwidjaja_37598
    Icon for Altostratus rankAltostratus
    Feb 17, 2009
    What if you reject it when the length of URI more than n chars, eg. 

     
 when HTTP_REQUEST { 
 if {[string length [HTTP::uri]] > 30} { 
 reject 
 }  
 }