restricting urls for a virtual server

You can also use the datagroup/class:

when HTTP_REQUEST {
if { not ([class match [HTTP::host] equals ALLOWED_DOMAINS]) } {
reject
}
}

ALLOWED_DOMAINS is a datagroup that contains the list of domains that can be allowed.