Forum Discussion
Simon_Blakely
Employee
when HTTP_REQUEST {
if { [class match [IP::client_addr] equals DG1-BLOCKED-SUBNETS]} {
if { not ([class match [HTTP::uri] equals DG2-ALLOWED-URIs]) } {
drop
}
}
}
You were missing a [ class match
Simon_Blakely
Apr 12, 2020Employee
use class match starts_with
if { not ([class match [HTTP::uri] starts_with DG2-ALLOWED-URIs]) }
Note: class match operates on a longest (or most specific) match first principle.