Re: Allow access to multiple URI based on IP in data group only, while allow others full access

You need to move the drop into the if

when HTTP_REQUEST {
  if [class match [IP::client_addr] equals DG1-BLOCKED-SUBNETS] {
    if { not ([HTTP::uri] equals DG2-ALLOWED-URIs]) } {
       drop
    } 
  }
}