Forum Discussion
cymru81
Altocumulus
Altocumulusirule logging?
Hi, we have the following irule that drops blacklisted IPs in place. Is there any way to log when this is triggered and how would we access this log if possible?
when CLIENT_ACCEPTED { if { [class match [IP::client_addr] equals ip-blacklist] } { reject } }
Cheers!
15 Replies
tatmotivCirrostratus
when HTTP_REQUEST { if { [class match [IP::client_addr] equals ip-blacklist] } { log local0. "[IP::client_addr] blocked due to blacklisting on virtual [virtual name]. Desired FQDN: [HTTP::Host]" reject } }
cymru81wow thank you! ill give it a try :)
- cymru81
getting this when I try to save irule:
error: [undefined procedure: HTTP::Host][HTTP::Host]
- tatmotiv
Sorry, it has to read HTTP::host. (lower case)
- cymru81
Thank you yet again, I owe you a beer :D
