For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kgaigl's avatar
kgaigl
Icon for Cirrocumulus rankCirrocumulus
Nov 25, 2020
Solved

IRule: Access-List

Hello,

we've got on a VS with ASM-Policy a IRule, that activates for external access only a maintenance-page, it looks like this:

when HTTP_REQUEST {
    if {!([class match [IP::client_addr] equals private_net])} {
    switch [HTTP::uri] {

    "/mylogo-bvk.png" {HTTP::respond 200 content [ifile get "mylogo-bvk.png"]}

    default {HTTP::respond 200 content {

(thanks to the community!)

Now there should take place a pen-test of an external consultant, and I've got to add there IP-Ranges (like 11.22.33.44/26 and 12.13.14.15/28)

All other external access should get the maintenance-page.

Could you give me some help, how to insert ip-range?

thanks a lot.

Karl

  • Hi Karl,

     

    Create a new datagroup.

    Add private and common IP addresses.

    Change datagroup name in iRule.

2 Replies

  • Hi Karl,

     

    Create a new datagroup.

    Add private and common IP addresses.

    Change datagroup name in iRule.