Forum Discussion

JSJ__333667's avatar
JSJ__333667
Icon for Nimbostratus rankNimbostratus
Apr 10, 2018

Request not hitting ASM_REQUEST_DONE in iRule

Hi All,

 

I'm trying to create iRule that looks to data group and if entry is found in it, ASM blocks the request.

 

My iRule is following:

 

when ASM_REQUEST_DONE { if { [class exists "dg_wp_blocked_paths"] && [class match "[HTTP::path]" starts_with dg_wp_blocked_paths] } { ASM::raise VIOL_BLOCKED_URL } }

 

And DG contains following string entries:

 

/admin /wp-admin /wp-login.php

 

But i can see that no request hit this iRule. I have turned iRule Blocked URL to Block in Security Profile settings and i can see that the requests are appearing in ASM Request log but not processed with the iRule.

 

The strange part is that we do have similiar iRule with exact same iRule aside different DG that works. I've checked the Virtual Server's but can't seem to point my finger what is different between these two - any hints?

 

ASM Advanced WAF
iRules
security

1 Reply

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Apr 10, 2018

    try this:

    when ASM_REQUEST_DONE {

 read as, does the path exist in the dg_wp_blocked_paths DataGroup

if { [class match "[HTTP::path]" starts_with dg_wp_blocked_paths] } {
    ASM::raise VIOL_BLOCKED_URL

} 

}