For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DarkSideOfTheQ_'s avatar
DarkSideOfTheQ_
Icon for Nimbostratus rankNimbostratus
Sep 16, 2009

Restrict access based off source network

Hello All, Sanity check...I'm trying to block access to specific pages based off the source network the client is coming from. The rest of the site should remain available to anyone. I *think...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Sep 17, 2009
This line was just for debugging of all requests: 

     log local0. "[IP::client_addr]:[TCP::local_port]: Request to [HTTP::uri] with dg: $::ips_internal"

If you want to use a switch statement you can use something like this: 

 
 when HTTP_REQUEST { 
    switch -glob [HTTP::uri] { 
       "*Test.jsp*" - 
       "*Stats.jsp*" { 
          if {not [matchclass [IP::client_addr] equals $::ips_internal]} { 
             log local0. "[IP::client_addr]:[TCP::local_port]: Matched IP check. Discarding request to [HTTP::uri]" 
             discard 
          } 
       } 
    } 
 }

Note the use of the asterisks for wildcard (glob) matching.

Aaron