Forum Discussion

pwallace_110041's avatar
pwallace_110041
Icon for Nimbostratus rankNimbostratus
Jan 30, 2015

iRule that drops only vpn connections

The following iRule sends only RST to clients that connect via vpn but all other users get 301 redirect then the connection close.   Running BIG-IP 10.2.3 Build 123.110 Engineering Hotfix HF1  ...
application delivery
devops
iRules
LTM
oracle
Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Jan 31, 2015

If you change your iRule and remove the 

noserver
from the responds, does it make a difference?

when HTTP_REQUEST { 
    if { [HTTP::method] eq "GET" or [HTTP::uri] starts_with "/cx/facebook/" } { 
        set url "https://[getfield [HTTP::host] ":" 1][HTTP::uri]"
        HTTP::respond 301 "Location" "$url" "Connection" "close" 
    } else { 
        HTTP::respond 405 content { you must use ssl to access this resource } "Connection" "close" 
    }
}