Forum Discussion
May 16, 2021
Hello Akshay.
It's no possible to do it that way. You should differentiate each pattern.
switch -glob $useragent {
"*havij*" {
log local0. "Blocking this request due to detected user agent : *havij*"
reject
}
"*zmeu*" {
log local0. "Blocking this request due to detected user agent : *zmeu*"
reject
}
"*sqlmap*" {
log local0. "Blocking this request due to detected user agent : *sqlmap*"
reject
}
}
Regards,
Dario.