For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thiyagu's avatar
Thiyagu
Icon for Cirrus rankCirrus
Dec 15, 2020

Irule help to block HTTP request if the HTTP Referer header value is null or with wrong domain

Hello Team, I'm in need of an Irule to block HTTP request if the HTTP Referer header value is null or with wrong domain address.   Could you please help with an irule for this request?   ...
application delivery
iRules
Enes_Afsin_Al's avatar
Enes_Afsin_Al
Icon for MVP rankMVP
Dec 15, 2020

Hi Thiyagu,

* character is not wildcard in here.

Can you try that?

if {($referer ne "") && !($referer contains ".abc.com")}
  • Thiyagu's avatar
    Thiyagu
    Icon for Cirrus rankCirrus
    Dec 17, 2020

    Hello aaa,

    I have tried the below irule and it is not working. As far I know the the flow logic is correct and for some reason this irule is not working.

     

    Could you please correct me if I' missing something here?

     

    when HTTP_REQUEST

    {

     

     set referer [string tolower [HTTP::header value "Referer"]]

     

         if {($referer ne "") && !($referer contains ".abc.com")}

         {

         HTTP::respond 400 content "Bad Request" "Content-Type" "text/html"

         }

     

     }

     

    Regards,

    Thiyagu