For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jason_40769's avatar
Jason_40769
Icon for Nimbostratus rankNimbostratus
Aug 20, 2010

Subsite ACL (Exception)

I have a working irule that blocks access to a subsite of a website based on a IP address. I would however like to add to the rule an exception url. for instance all access is blocked to /admin but i would like a folder behind /admin to be able to be accessed. Lets call that folder /upload.
application delivery
dev
devops
iRules

3 Replies

  • Jason_40769's avatar
    Jason_40769
    Icon for Nimbostratus rankNimbostratus
    Aug 20, 2010
    Here is the iRule

     

     

    when HTTP_REQUEST {

     

    if { [class match [string tolower [HTTP::uri]] contains subsite] and ![class match [IP::client_addr] eq allow] } {

     

    discard }

     

    }
  • Chris_Miller's avatar
    Chris_Miller
    Icon for Altostratus rankAltostratus
    Aug 21, 2010
    when HTTP_REQUEST {
if { [class match [string tolower [HTTP::uri]] contains subsite] and !([[string tolower [HTTP::uri]] contains "/admin/upload") and ![class match [IP::addr [IP::client_addr]] eq allow] } {
discard }
}

    Should do it.
  • The_Bhattman's avatar
    The_Bhattman
    Icon for Nimbostratus rankNimbostratus
    Aug 21, 2010
    Hi Jason,

    You could also provide some information to the clients when they are denied access

    Here is the one modified from Chris' 

    
when HTTP_REQUEST {
     if { [class match [string tolower [HTTP::uri]] contains subsite] and !([[string tolower [HTTP::uri]] contains "/admin/upload") and ![class match [IP::addr [IP::client_addr]] eq allow] }
       {
            HTTP::respond 200 content "Forbidden Redirect From Remote Server\Acess is forbidden" 
        }

}

    I hope this helps

    Bhattman