Forum Discussion

shipszky_319427's avatar
shipszky_319427
Icon for Nimbostratus rankNimbostratus
Jan 29, 2018

Ip filter iRule with multiple data groups

I currently have an iRule in place to do ip filtering in multiple places in a website. I had an oversight when this was first written and failed to put a rule in for the entire website. when H...
application delivery
iRules
JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Jan 30, 2018

Would the following do (untested)?

} elseif { { [string tolower [HTTP::uri]] eq "/" } then {
    set dg_list {dgrp1 dgrp2 dgrp3}
    set allowed 0

    foreach dg $dg_list {
        if { [class match [IP::client_addr] equals dg] }{
            set allowed 1
            break
        }
    }

    if { $allowed < 1} {
        HTTP::respond 403 content "Access Denied"
    }
}

(Replace dgrp* with real data group names.) .