Forum Discussion

miguel_alvarez_'s avatar
miguel_alvarez_
Icon for Nimbostratus rankNimbostratus
Dec 21, 2017

Is it posible to put this i-rule, to drop a hostname, instead an IP addr?:

when CLIENT_ACCEPTED { if { [IP::addr [IP::client_addr] equals some_hostname] } { drop } }  
BIG-IP
devops
irule
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Dec 21, 2017

You drop connections not IP addresses or Hosts. If I understand you correctly, you just want to drop a connection if a particular HTTP Host is requested. That can be done as follows

when HTTP_REQUEST {
  if { [HTTP::host] eq "www.drop.me" }{
    drop
  }
}

This requires HTTP profile applied to your Virtual Server, and SSL/TLS must be offloaded with a clientSSL profile by BigIP if it arrives encrypted

Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Dec 21, 2017

Your question confuses me because "HTTP Host" is a request destination attribute. Clients/Sources do not specify their HTTP Host values when making requests. It seems like you have misunderstood how HTTP works.

 

The closest thing to a "HTTP Host Source" that you could apply filters to is a HTTP Referer. Referer is an external host that initiates a HTTP redirect to your site.

 

Rdgs,