Access Control Based On IP for specific URL

Forgive my ignorance here but I am an irule virgin - would it look something like this?

 

I assume I would need to create datagroups for trustedaddresses and securedvirtualdirectories? What would these look like? I am guessing the trustedaddresses dsatagroup would be an address type group and the securedvirtualdirectories would need to be some sort of string?

 

 

 

 

}

 

when CLIENT_ACCEPTED {

 

 

if { [matchclass [IP::client_addr] equals $::trustedAddresses] }

 

{ [matchclass [HTTP::uri] equals $::securedvirtualdirectories]}{

 

 

Uncomment the line below to turn on logging.

 

log local0. "Valid client IP: [IP::client_addr] - forwarding traffic"

 

forward

 

} else {

 

 

Uncomment the line below to turn on logging.

 

log local0. "Invalid client IP: [IP::client_addr] - discarding"

 

discard

 

}

 

 

}