iRules -- IF / ELSE / OR

Hi,

Hoping someone can help me with an iRule problem I'm having. If this isn't the right place... please accept my apologies and let me know the right place. This is my first post, please be gentle.

Our site is built in Oracle Application Express (APEX) we have an html file (say 'myfile.html') which routes through to the DAD as /pls/myenvironment/f?p=13000:101:

So, I have the following iRule...

when HTTP_REQUEST {
    if {  (  [HTTP::uri] equals "/myfile") } {
        HTTP::path "myfile.html"
        pool mypool
        }
else {HTTP::respond 404 content {FS5 Page Not FoundFS5 Page Not Found}}}

Doesn't work as desired, everything is blocked.

However, if my iRule was...

when HTTP_REQUEST {
    if {  (  [HTTP::uri] equals "/myfile") } {
        HTTP::path "myfile.html"
        pool mypool
        }}

... then everything works, and I mean EVERYTHING. Why is that? I have no default pool so I assumed all we would allow would be https://mysite.com/myfile ... nut no, everything is allowed through. Like, I have exposed my full 'html' folder to the internet and if some curious/malicious user was to start fiddling around with the URL, they could effectively get into places they really shouldn't. Seemingly, this is because once we load 'myfile.html' every other click within the application goes direct to the DAD mentioned before, /pls which is blocked in my first iRule example, but allowed without issue in the second.

Couple of things worth mentioning before we carry on... from what I'm told (excuse my lack of web dev knowledge), APEX pages are split into frames/sections that each make a call to the database when you need it -- basically pages within pages. Plus we have multiple applications running out of the same database on the same DAD, an internet facing one (/pls/myenvironment/f?p=13000) and a number of back end applications we absolutely do not want on the internet (/pls/myenvironment/f?p=10000 + 11000 + 12000 + you get the idea).

I thought I could use an 'or' in my iRule to say 'if uri equals myfile OR uri starts_with /pls/myenvironment/f?p=13000' but then HTTP:path is still pointing to myfile.html which means I'm just in some eternal loop, I guess.

So... from an F5 point of view... is the best way to fix this up simply create a new DAD for the internet facing application or is there some clever iRule trickery that I've not thought about? I am assuming it is an incredibly simple thing that I am over complicating.

I hope that makes sense...

Regards, Tim.