Forum Discussion
Simon_Blakely
Employee
when HTTP_REQUEST {
if { [class match [IP::client_addr] equals DG1-BLOCKED-SUBNETS]} {
if { not ([class match [HTTP::uri] equals DG2-ALLOWED-URIs]) } {
drop
}
}
}
You were missing a [ class match
ant77
Apr 10, 2020Cirrostratus
one question here is for the URI in the data group, it seems that it stops when it matches, example -- /APP1/ only. If i go to /APP1/ABC/123, it fails. Is there a way to match and allow anything beyond like a wild card? I tried this and it doesn't seem to work --> /APP1/*
The wildcard asterisk does not work for some reason...