Forum Discussion
Jim_Sellers_106
Nimbostratus
NimbostratusPath Based ACL Irule
Here is the scenario
I have 9 IP addresses that I want to allow to the following path but allow access to any other URL/URI on the server.
Lets just say 1.1.1.1 through 1.1.1.9
/npcaccounts/ManageAccount.aspx
/npcaccounts/ManageVendor.aspx
I have a few idea's in mind... creating a class for the sources and then creating a class for the paths. Any suggestions or help would be much appreciated.
12 Replies
Jim_Sellers_473Well I am just trying only give access to a datagroup of IP addresses to a couple Admin type URL's and block any IP's that are not in the datagroup that try to access lets say /customer/ems*- Jim_Sellers_473Here is the current method I am trying big thanks for Bhattman!!
ACL_EMSECOMMER_PROD is the datagroup I have setup with some IP addresses that need to be able to access /customers/ems*
when HTTP_REQUEST {
switch -glob [string tolower [HTTP::uri]] {
"/customers/ems/*"
{
if { not [class match [IP::client_addr] equals ACL_EMSECOMMERCE_PROD ] } {
discard
}
}
}
}
