Forum Discussion

Nimbostratus

Jan 13, 2023

irule creation based on Host Address contains IP Address

help in creating irule for disabling ASM policy when traffic from certain Source IP address and violation triggered as Host header contains IP address

application delivery

Lead

Nimbostratus

Jan 13, 2023

Hi,

If request come from specific IP instead of getting it blocked under ASM violation as (Host Header contains IP address) we want request to be allowed with the help of irule.

Thanks,

Lead

Mohamed_Ahmed_Kansoh
MVP
Jan 13, 2023
Yes Lead ,

The irule of CA_Valli will solve this requirement.
- Lead
  Nimbostratus
  Jan 13, 2023
  Yes it will work, but it will allowed all the traffic
  
  Thanks,
  Amit
  - Mohamed_Ahmed_Kansoh
    MVP
    Jan 13, 2023
    Okay Lead ,
    
    In this case I think you should dis-check the block box of " host header contains ip addres " from learning and blocking settings under ( http compliance ) section.
    
    You will allow anyone to browse your application by ip directly.
    
    I don't know if your request is doable by iRules or not as you need to allow specific violation under specific source ip.
Paulius
MVP
Jan 13, 2023
Lead Because you want to first match a function of the ASM policy and then disable the ASM policy I do not believe this is possible because it's an all or nothing from what I can tell in process order.