For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AlexB18's avatar
AlexB18
Icon for Nimbostratus rankNimbostratus
Sep 03, 2024

iRule not working for URI Block

I have a virtual server www.xyz.com hosted on LTM for HTTPS service   and i'm looking to block (403 response) one of the application URI which is https://www.xyz.com/MW/entryPoint.htm   I tried b...
irule
LTM
security
Juergen_Mang's avatar
Juergen_Mang
Icon for MVP rankMVP
Sep 03, 2024

You force the HTTP::uri to be lower case and compare it with a string with upper case letters. This can not work.

This should work (not tested):

when HTTP_REQUEST {
  if { [HTTP::has_responded] } { return }
  if  { ([string tolower [HTTP::host]] eq "www.xyz.com") && ([string tolower [HTTP::path]] eq "/mw/entrypoint.htm") } {
    HTTP::respond 403
  }
}