For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mattias_56723's avatar
mattias_56723
Icon for Nimbostratus rankNimbostratus
Sep 10, 2009

simple filter question of uri

If I want to filter out "?listall=1" and also "log=0" in the uri.

 

ex: http://testsite.com/test.aspx?listall=1?log=0

 

to http://testsite.com/test.aspx

 

How will the syntax look like ?

 

 

Best regards

 

Max

 

 

 

14 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    You can use matchclass (Click here) to compare one string against a datagroup.

     

     

    What in the URI do you want to check against the class though? The path, query string, requested object, etc?

     

     

    Aaron
  • I will take a look at he matchclass tonight.

     

    example url

     

    http://testsite.com/test.aspx?pageid=13

     

     

    Here I want to filter (block) "test.aspx?pageid=13" so the url hitting the webserver will be just http://testsite.com

     

     

    I also have 5more of the pageid:s that I want to block.

     

    ex

     

    http://testsite.com/test.aspx?pageid=13

     

    http://testsite.com/test.aspx?pageid=33

     

    http://testsite.com/test.aspx?pageid=42

     

    http://testsite.com/test.aspx?pageid=43

     

    http://testsite.com/test.aspx?pageid=55

     

     

     

     

     

     

     

     

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    You could parse the value of the pageid parameter using [URI::query [HTTP::uri] pageid] and then use matchclass to see if it's defined in a datagroup named pageids_class:

     
     if {[matchclass [URI::query [HTTP::uri] pageid] equals $::pageids_class]}{ 
      
         pageid parameter value exists in the pageids_class datagroup 
     

    Aaron