For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rafish_129330's avatar
Rafish_129330
Icon for Nimbostratus rankNimbostratus
May 18, 2017

irule to allow specific url and drop everything else base on src ip

Hello,   Need help to add some condition to work irule,   I have irule that deny access to uri that contains "admin" "login" and "mydb" From all ip address except my ip   This the irule: (wo...
iRules
security
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
May 18, 2017

Hello,

Try this 

   when HTTP_REQUEST {

 if {[HTTP::uri] contains "admin" || [HTTP::uri] contains "login" || [HTTP::uri] contains "mydb"} { 
    if {not[class match [IP::client_addr] equals my_ip_Address] } { 
    log local0. "dropped connection my ip address[IP::client_addr]" 
    reject 
   } 
 } 

 if { !(([string tolower [HTTP::host]] eq "site.domain.com") and ([HTTP::path] starts_with "/xxx/yyy/zzz")) } {
  log local0. "rejected request [HTTP::uri] for client [IP::client_addr]"
  reject
  }
}