URL rewrite iRule - ASM
ASM is blocking a request which doesn't have domain name in one of the parameters in the URI. Background: example.domain.com is a VIP and has ASM enabled. Below is the default breakdown login page that changes per request, the issue is one of parameters(resource_url), is missing the domain name, example.domain.com before the context root, /user/loginsso, and ASM thinks it's a web command execution attack and blocking it and I don't want to unblock ASM for this particular request type. I think rewriting the URI fixes the issue but, if it is an LTM iRule, does ASM triggers based on the source URL or rewrite URL? if based on source URL, then what are the config changes to be done in the ASM? and couple of paramters in the url changes per request, so not sure how to use the stringmap, please help. https://example.domain.com/login/login.html ?bmctx=some random ID that changes per request &contextType=external &miscCookies=disablehttponly &username=string &OverrideRetryLimit=1 &password=secure_string &challenge_url=https://example.domain.com/login/login.html &ssoCookie=disablehttponly &DCCCtxCookieMaxLength=5000 &request_id=some ID that changes per request &authn_try_count=0 &locale=en_US &resource_url=/user/loginsso Expected: resource_url=https://example.domain.com/user/loginsso
Debugging @ figuring out why suddenly an iRule doesn't work
Hi, Any hint or pointers how to dig this further? Below is sample iRule being use....it's actually to redirect http website to https version... only 1 doesn't work......the other 3 ok when HTTP_REQUEST { if {[HTTP::host] equals "www.websiteA.com"} { HTTP::redirect "https://www.websiteA.com" } if {[HTTP::host] equals "websiteA.com"} { HTTP::redirect "https://www.websiteA.com" } if {[HTTP::host] equals "www.websiteB.com"} { HTTP::redirect "https://www.websiteB.com" } if {[HTTP::host] equals "websiteB.com"} { HTTP::redirect "https://www.websiteB.com" } } Only redirect request from websiteA.com failed others than that all these below OK, successfully redirected to their https version... wwww.websiteA.com websiteB.com
Custom Message using iRule for Runtime Error
Our application throws a runtime error during few code testing in our Test lab. We do not want this error to be displayed when browsed externally via internet. I'm looking for an iRule that will present a custom message like 'Oops' whenever web server returns below error message - Server Error in '/' Application. Runtime Error