Forum Discussion
F5Hopper_28651
Nimbostratus
NimbostratusRegex in iRule
Im making a rule to catch bad code being in HTTP POST.
for some reason we have some sites trying to do some sort of XSS attack, but posting URL strings in the POST and then they get a 500error. ...
F5Hopper_28651Nimbostratus
NimbostratusI just noticed that my samples didnt show in my main post. Im looking for samples in attached TXT file.
Kevin, I tryied your rule, I changed the log to, log local0. "Gotcha![IP::client_addr] with URI [HTTP::uri]"
Im not sure if its working or not... I get these in my log for EVENT
Rule test-regex : query = Step=2
Rule test-regex : query =
Rule test-regex : query = Step=4
Rule test-regex : query = Step=3
No gotcha! or client_addr. what do you make of that?