For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

NetworkTeam_178's avatar
NetworkTeam_178
Icon for Nimbostratus rankNimbostratus
Nov 04, 2016

Logging for iRule isn't working?

Hello,   I want to output rejections for this iRule to a syslog server. My syntax is   when HTTP_REQUEST { if { !(([HTTP::host] starts_with "website.co.uk") or ([HTTP::host] starts_with ";) o...
application delivery
iRules
LTM
security
cjunior's avatar
cjunior
Icon for Nacreous rankNacreous
Nov 04, 2016

Hi, What about doing this way?

when HTTP_REQUEST { 
    switch -glob [string tolower [HTTP::host]] {
        "website.co.uk*" -
        "www.website.co.uk*" -
        "backup.mywebsite.co.uk*" -
        "www.backup.mywebsite.co.uk*" {
            nothing to do
        }
        default {
            log local0. "blocked [HTTP::header "User-Agent"] requesting [HTTP::host][HTTP::uri]"
            discard
        }
    }
}

It works for you? I hope so.

Regards.