For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rafish_129330's avatar
Rafish_129330
Icon for Nimbostratus rankNimbostratus
Apr 23, 2018

irule that block host to all ip address except specific ip

Hello,   I need irule that block access to some url for all ip address except specific ip, i wrote the irule and i success to block the url but the problem is that the irule block access to all i...
iRules
security
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Apr 23, 2018

You could simply the logic by placing different host headers into a datagroup:

 **DATAGROUP** 
ltm data-group internal host_dg {
    records {
        test1.technion.ac.il {}
        test2.technion.ac.il {}
        test3.technion.ac.il {}
        test4.technion.ac.il {}
    }
    type string
}

 **iRULE**  
when HTTP_REQUEST {
    if {([class match [HTTP::host] starts_with host_dg]) && ([IP::addr[IP::remote_addr] equals 10.10.10.10/255.255.255.255])} {
        HTTP::respond 404 "Not Found" "Connection" "close" 
        log local0. "This Connetion blocked By iRule My-iRule" 
    }
}