Forum Discussion
What_Lies_Bene1
Sep 24, 2013Cirrostratus
Sure. You're very close. I don't see the need for the priority so I've dropped that. I've changed 'reject' to 'drop' so no TCP RST is sent, saving a few more CPU cycles and a tiny bit of memory. Just ensure the case of the header and it's value are correct (or alternatively use 'string tolower' to make everything lower case).
when HTTP_REQUEST {
if { [HTTP::header value "DeviceId"] equals "SamsungXYZ123" } {
drop }
}