For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AlexB18's avatar
AlexB18
Icon for Nimbostratus rankNimbostratus
Sep 03, 2024

iRule not working for URI Block

I have a virtual server www.xyz.com hosted on LTM for HTTPS service
 
and i'm looking to block (403 response) one of the application URI which is https://www.xyz.com/MW/entryPoint.htm
 
I tried below irule but its not working .
 
when HTTP_REQUEST {
  if { [HTTP::has_responded] } { return }
  if  {[string tolower [HTTP::host]] contains "www.xyz.com" && [string tolower [HTTP::uri]] eq "/MW/entryPoint.htm" } {
HTTP::respond 403
    return
  }
}
 
Any suggestions appreciated. Thanks. 
irule
LTM
security

1 Reply

  • Juergen_Mang's avatar
    Juergen_Mang
    Icon for MVP rankMVP
    Sep 03, 2024

    You force the HTTP::uri to be lower case and compare it with a string with upper case letters. This can not work.

    This should work (not tested):

    when HTTP_REQUEST {
  if { [HTTP::has_responded] } { return }
  if  { ([string tolower [HTTP::host]] eq "www.xyz.com") && ([string tolower [HTTP::path]] eq "/mw/entrypoint.htm") } {
    HTTP::respond 403
  }
}