irules blocking url

Please try this irule & use f5 iRule editor.

                    when HTTP_REQUEST {
                     if { [string tolower [HTTP::uri]] ends_with "/audio.mp3" } {
                            drop
                        } 
                      }

Hi,

You have the irules wiki here : https://devcentral.f5.com/wiki/irules.homepage.ashx

You can also have a look at the LTM policies.

Otherwise, you can use a similar irule :

    when HTTP_REQUEST {
       if { [HTTP::host] contains "f5.com" and [URI::basename [HTTP::path]] eq "audio.mp3" } {
            HTTP::respond 403 content "Access Denied" Connection Close
       }
    }

I have a question regarding your post, do you want to block incoming request from internet users to your own servers. Or the opposite, use F5 as a Forward Proxy and block outgoing requests to internet websites ?

Hi,

You have the irules wiki here : https://devcentral.f5.com/wiki/irules.homepage.ashx

You can also have a look at the LTM policies.

Otherwise, you can use a similar irule :

    when HTTP_REQUEST {
       if { [HTTP::host] contains "f5.com" and [URI::basename [HTTP::path]] eq "audio.mp3" } {
            HTTP::respond 403 content "Access Denied" Connection Close
       }
    }

I have a question regarding your post, do you want to block incoming request from internet users to your own servers. Or the opposite, use F5 as a Forward Proxy and block outgoing requests to internet websites ?

How do i add more then one drops? i.e audio1.mp3, audio2.mp3?

Here is a quick example of irule that will match for HTTP host header of (f5.com or www.f5.com) and then look for multiple files (ex audio.mp3, audio1.mp3 etc.)

Code

when HTTP_REQUEST {
switch -glob [string tolower [HTTP::host]] {
    "f5.com" -
    "www.f5.com" {
        switch -glob [string tolower [HTTP::path]] {
            "*/audio.mp3" -
            "*/audio1.mp3" -
            "*/audio2.mp3" {
                HTTP::respond 403 content "ACCESS Denided" Connection Close
            }
        }
    }
  }
} 

Tools that I use: I currently use the F5 iRule editor to help with creating rules. I'm currently looking at eclipse with the f5 plugin, just haven't tried it out yet.

Hi,

You can do the following :

when HTTP_REQUEST {
        switch -glob [string tolower [HTTP::host]] {
            "f5.com" -
            "www.f5.com" {
                switch [string tolower [URI::basename [HTTP::path]]] {
                    "audio.mp3" -
                    "audio1.mp3" -
                    "audio2.mp3" {
                        HTTP::respond 403 content "ACCESS Denied" Connection Close
                    }
                }
            }
          }
} 

You can also use a string based datagroup instead of switch commands :

when HTTP_REQUEST {
    if { [class match [string tolower [HTTP::host]] CLASS_FQDN] and [class match [string tolower [URI::basename [HTTP::path]]] CLASS_URI_BASENAME] } {
        HTTP::respond 403 content "ACCESS Denied" Connection Close
    }
}

You just define two datagroups named CLASS_FQDN and CLASS_URI_BASENAME

You can also choose to mix datagroup and switch command :

when HTTP_REQUEST {
    switch -glob [string tolower [HTTP::host]] {
        "f5.com" -
        "www.f5.com" {
            if { [class match [string tolower [URI::basename [HTTP::path]]] CLASS_URI_BASENAME] } {
                HTTP::respond 403 content "ACCESS Denied" Connection Close
            }
        }
    }
}

And finally, you can use directly LTM policies that allow you to graphically configure the same rules as described above, but without irule logic required.