Forum Discussion
CA_Valli
MVP
I'd just advise to avoid using "string tolower" on HTTP uri instruction, since path is case sensitive.
MaxMedov
Apr 18, 2023Cirrostratus
So what is better?
- CA_ValliApr 18, 2023MVP
[HTTP::path] or [HTTP::query] should work just fine for exact matches on path/query parts of the uri
- Apr 18, 2023
If you are using a mixture of upper and lowercase letters in your URI and you need an exact match on this, then remove the [string tolower]
when HTTP_REQUEST { if { ( ( [IP::addr [IP::client_addr] equals X.X.X.X] ) && ( [HTTP::uri] contains "XYZ" ) ) } { drop } }