Forum Discussion

aboulleill_3013's avatar
aboulleill_3013
Icon for Nimbostratus rankNimbostratus
Jan 24, 2018

irule to block URL to specific source IP

I'm trying to block all URLs except "/cvs/chn.website.cvs.Account_1.0?wsdl" to source IP address 192.168.100.201.But until now 192.168.100.201 is still able to access other URLs like if the irule doe...
application delivery
iRules
LTM
security
Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Jan 24, 2018

I've amended your first iRule to log at various stages of execution. Please could you try the rule and post your log entries. 

when HTTP_REQUEST { 
    log local0. "CLIENT IP: [IP::client_addr] URI: [HTTP::uri]"
    if {[IP::client_addr] equals "192.168.100.201"}{ 
        log local0. "FIRST IF"
        if {[string tolower [HTTP::uri]] ne "/cvs/chn.website.cvs.account_1.0?wsdl"} { 
            log local0. "SECOND IF"
            drop 
        } 
    } 
}