For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Philip_Jacob_69's avatar
Philip_Jacob_69
Icon for Nimbostratus rankNimbostratus
Jun 23, 2010

Reject httprequest on certain Cookievalue

We seem do have a scanner comming from many different Locations, trying to bring down our site with a series of http-Requests. They all have a spec. Cookie set.     Is it possible to reject the...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 23, 2010
Hi Phil,

You can check for a cookie in requests and reject them if there is a specific value: 


when HTTP_REQUEST {

    Check for an apache cookie with a value of 78689768967896
   if {[HTTP::cookie apache] eq "78689768967896"}{

       Reset the connection
      reject
   }
}

Aaron