Forum Discussion
hooleylist
Aug 23, 2011Cirrostratus
If you're on 9.4.4 or higher, you should remove the $:: prefix from the datagroup name. If you're on 10.0+ you should use class match instead of matchclass:
when HTTP_REQUEST {
if {[class match [string tolower [HTTP::header "User-Agent"]] contains danger-user-agents] } { drop }
}
If you run into issues with drop, try reject instead.
Aaron