For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Andrea_361's avatar
Andrea_361
Icon for Nimbostratus rankNimbostratus
Oct 22, 2009

URI access restricted to ip subnet

hi people,   I have F5 running version 9.4.7 , I try to implement iRule in order to limit access to defined URI only to internal subnet, but i'm unable to obtain the correct result, the URI is al...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 22, 2009
Hi Andrea,

 

 

That syntax is okay, but wouldn't handle an attacker who makes a request for /nonexistent_directory/../cms/. See this post for details:

 

 

Irule for restriciting URL paths unsecure

 

http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=30900

 

 

Aaron