Responce URI Masking/Hiding

Hmmm. I replied to this days ago, but my reply does not appear to have posted. Oh well, another puzzle for the noob. Thanks again for your response, Aaron.

 

 

Security is the primary concern, and in that context the less info sent to the user the better. 1 isn't really a requirement, it is more of a goal. I would prefer to hide the paths so the visitor sees "/home" as "/", but there is no value in my hiding /home if its subdirectories are going to 'uncloak' it any way.

 

 

If I am going to leave the path visible, the 2 is all the more relevent. I need to pin the visitors within /home and the code you provided above appears to be on track, but you say that it is easily bypassed. I basically understand the iRule, but would you mind explaining further how someone would bypass it??