Forum Discussion
Dave_22402
Nimbostratus
Nimbostratusirule based on ip and url
I am trying to construct an Irule that first checks for a url and then allows access based on IP.
Example -
if the url is "/foo/*" and IP = 123.123.123.123
then g...
hoolio
Cirrostratus
CirrostratusKeep in mind that an attacker could probably bypass this iRule validation very simply using URL obfuscation techniques like:
/not_foo/../foo/
//foo/
See this post for more examples:
http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3090031324
Aaron
