Forum Discussion

Russell_E_Glaue's avatar
Russell_E_Glaue
Icon for Nimbostratus rankNimbostratus
12 years ago

Matching ASCII codes %00 - %1f in HTTP::uri

According to: http://www.w3schools.com/tags/ref_urlencode.asp   "The ASCII device control characters %00-%1f were originally designed to control hardware devices. Control characters have nothing to...
Steven_Filisko_'s avatar
Steven_Filisko_
Icon for Nimbostratus rankNimbostratus
12 years ago

I am not an expert-level iRuler at this point (yet), so someone may have a better, more direct answer, but... I would add the "log" lines below. The output will show in the "Local Traffic" log (or /var/log/ltm on the F5 itself). It will give you a better idea of what is going on.

I did find a package that is supposed to "test iRules" but it isn't quite very intuitive (from what I have seen so far).

when HTTP_REQUEST {
    log local0. "Checking URI: [HTTP::uri]"
    if { [HTTP::uri] contains "%00" } {
        log local0. "Illegal URI: Closing Connection."
        HTTP::close
        TCP::close
    }
}