For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

aboulleill_3013's avatar
aboulleill_3013
Icon for Nimbostratus rankNimbostratus
Jan 23, 2018

limit access from source 192.168.1.1 to single URL and permit all others

Dears,   I'm trying to write an irule that limit access from source 192.168.1.1 to single url : else permit to all.When applying the below on VS its not working anymore. it should be when http_re...
application delivery
iRules
LTM
security
Daniel_Varela's avatar
Daniel_Varela
Icon for Employee rankEmployee
Jan 24, 2018

Hi Ralph, Please add debugging and post it here otherwise is really difficult to see where is the problem. You can find that by executing tail -f /var/log/ltm in rhe command line.

when HTTP_REQUEST { 
log local0. "URI: [HTTP::uri]"    
log local0. "IP: [IP::client_addr]"
if { ([HTTP::uri] ne "/cvs/chn.website.cvs.Account_1.0?wsdl") and  ([IP::client_addr] equals "192.168.100.201")} { 
     reject 
    } 
}

Some notes: HTTP::uri does not return the hostname but it will include all the parameters in the URL. The irule won't work unless the URI is an exact match. Try to chuck the irule in smallest pieces and verify if the functionality separately.