For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

k20's avatar
k20
Icon for Nimbostratus rankNimbostratus
Dec 04, 2020

Need help to whitelist URI's

I need some help with the iRule. The goal is to allow users to access a limited number of URI's from the Internet but open to all for internal users.   I have created a datagroup that contains th...
application delivery
iRules
Samir's avatar
Samir
Icon for MVP rankMVP
Dec 05, 2020

Above  iRule is correct, You can remove the statement which is creating issue.

If i will be at you place then can try negative scenario and short irule for fun. You can try to use URI_DB class to add and remove the URI.

when HTTP_REQUEST {
if { !([class match [IP::client_addr] equals internal_subnets]) && ([class match [HTTP::uri] starts_with URI_DB) } {
HTTP::redirect "http://app.com/sorry.html"
        }
else {
	pool app_80_pool 
	}
}

Add the all uri in URI_DB

"/sorry.html"

"/foo/combined.js*"

"/foo/css/*"

"/foo/desktopreset"

Please tune iRule per requirements.

Thanks

k20's avatar
k20
Icon for Nimbostratus rankNimbostratus
Dec 05, 2020

Just tried it and no luck. If I go to the home page app.com, it redirects me to the sorry.html. By the way, your script is missing the square bracket at the end of the URI_DB. It seems like an easy one. Oh boy, I couldn't get it to work.

.