Forum Discussion
Mike_59458
Nimbostratus
NimbostratusRule not working as expected
I have installed this rule on a virtual server for a Exchange 2010 Client Access Server. I am trying to block access to OWA on this VS. Code is below:
(code)
when HTTP_REQUEST {
...
Michael_YatesNimbostratus
NimbostratusMost instances of OWA that I have seen use it has http://owa.domain.com/owa
So you might want to use "starts_with".
eq / equals is absolute, so if the HTTP::uri contains anything else (upto and including a trailing slash on the owa "/owa/", then it would not qualify as a match.
Hope this helps.