Forum Discussion

chiznitz_15400's avatar
chiznitz_15400
Icon for Nimbostratus rankNimbostratus
Mar 07, 2014

iRule - Don't show 403 forbidden alert when from whitelisted IP

Hi all,   Our website doesn't allow users to backspace the URL and press enter, this triggers a 403 forbidden alert. Many of our customers are doing this on accident and it gives us a lot of nois...
application delivery
ASM Advanced WAF
devops
iRules
security
chiznitz_15400's avatar
chiznitz_15400
Icon for Nimbostratus rankNimbostratus
Mar 10, 2014

This is what I have so far, the question is will this already have logged the violation? I'm trying to say that if this violation happens we don't want to see it in the logs.

 

when ASM_RESPONSE_VIOLATION { set x [ASM::violation_data] set y [ASM::client_ip] if {([lindex $x 0] contains "VIOLATION_HTTP_STATUS_IN_RESPONSE") and $y equals x.x.x.x } ASM::disable

 

} else { ASM::enable /Common/myasmpol

 

}}