Update packet filter rule from icall

Hi Ryan,

glad to hear that the ISTATS/iCall approach is working out for your.

A request limiter should be mplemented because the "/myvpn?sess=" ISTATS-trigger is anonymously accessible. But its not a big deal to implement such an request limiter.

when CLIENT_ACCEPTED {
    ACCESS::restrict_irule_events disable
}
when HTTP_REQUEST {
    if { [HTTP::uri] starts_with "/myvpn?sess=" } then {
        if { [table lookup "XX policy string Client_Connected"] eq "" } then {
            table set "XX policy string Client_Connected" "1" indefinite 5
            ISTATS::set "XX policy string Client_Connected" 1
        }
    }
}

Note: The above example will limit the execution of the iCall script to a maximum of every 5 seconds.

Cheers, Kai