For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Olson_172's avatar
Chris_Olson_172
Icon for Altostratus rankAltostratus
Dec 11, 2018

irule to Block specific URLs, allow the rest

I need to block traffic from two explicit URLs, but allow all other traffic even if it starts with the same characters as what is blocked. This is my best guess at syntax. Please correct any errors y...
application delivery
iRules
LTM
gscholz_370150's avatar
gscholz_370150
Icon for Nimbostratus rankNimbostratus
Dec 11, 2018

If you remove some brackets and one of the "if"s it works. You can always test it by logging the output to /var/log/ltm, see below.

when HTTP_REQUEST {
    if {[string tolower "[HTTP::host][HTTP::path]"] equals "example.domain.com/xyz/ab/"
    or [string tolower "[HTTP::host][HTTP::path]"] equals "example.domain.com/xyz/ab"} {
        log local0. "Rejected Connection [HTTP::host][HTTP::path], converted [string tolower [HTTP::host][HTTP::path]]"
        reject
    }
}
Chris_Olson_172's avatar
Chris_Olson_172
Icon for Altostratus rankAltostratus
Dec 11, 2018

Thank you so much. I will test. Sadly, we are in a managed environment and I have little access to my own F5's to test and I must rely on your expertise. Thanks again. I will report back on results.