Forum Discussion
sidiov
Nimbostratus
NimbostratusTrouble with a irule using a data group
I am attempting to drop several user agent headers that hit a website consistantly with bad traffic, I wanted to use a data group for a list of agents, but when i use it, it drops all connections. ...
hoolio
Cirrostratus
CirrostratusIf you're on 9.4.4 or higher, you should remove the $:: prefix from the datagroup name. If you're on 10.0+ you should use class match instead of matchclass:
when HTTP_REQUEST {
if {[class match [string tolower [HTTP::header "User-Agent"]] contains danger-user-agents] } { drop }
}
If you run into issues with drop, try reject instead.
Aaron
