Restrict Access to URI based on Source IP

Hi Dave,

 

 

It's possible, but not effective as the URI check in an iRule can't handle the various obfuscation methods an attacker could use to bypass the validation. If you did try to normalize all the potential obfuscation techniques, you'd probably end up with a resource hog of an iRule.

 

 

See this post for details:

 

 

http://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3090031324

 

 

I should note that you can normalize the URI using an app firewall like ASM or validation on the webservers themselves.

 

 

Aaron

I get access denied when I click on the link you posted (https://devcentral.f5.com/Default.aspx?tabid=53&forumid=5&tpage=1&view=topic&postid=3090031324 ) how do I get access?

Hi,

 

 

Sorry, there's an access issue with the old links. Here is a working link:

 

https://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/42/aft/30900/showtab/groupforums/Default.aspx31324

 

 

Aaron