For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tom_Bortels_112's avatar
Tom_Bortels_112
Icon for Nimbostratus rankNimbostratus
Dec 29, 2013

reject not rejecting?

I have to be missing something simple here... setting up a new irule to do a simple whitelist. Here's the whole thing (stolen shamelessly from somewhere else on DevCentral): when HTTP_REQUEST { ...
application delivery
devops
iRules
Tom_Bortels_112's avatar
Tom_Bortels_112
Icon for Nimbostratus rankNimbostratus
Dec 30, 2013

Interestingly - if I change the type to "Standard" rather than "Performance (HTTP)" - this workd (in that I get rejected now, which was the expected behavior).

 

I guess this modifies the question a bit - why would choosing the Performance/fasthttp profile allow irule execution - but not honor the reject (silently!)?

 

Tom_Bortels_112's avatar
Tom_Bortels_112
Icon for Nimbostratus rankNimbostratus
Dec 30, 2013
The ugly continues - having seen it block, I add my IP into the datagroup - and it posts the "do not redirect" log line in the original script... but on the client... it just hangs until timeout. Very, very odd - never had these issues in 10.2.4; there's got to be something fundamental I'm missing...