Restricting access to a client to only access certain URI and nothing else

Question

I have a URI  https://www-uat.corpoint.be/&nbsp;
and then i have this also   https://www-uat.corpoint.be/rest/leads/callback* &nbsp;
On firewall we have allowed the public IP which resolve to this URI for any source&nbsp;
Now on F5 I have the following requirement :&nbsp;
I want everybody to access https://www-uat.corpoint.be/&nbsp;
but i want an IP 76.3.3.3  to only access https://www-uat.corpoint.be/rest/leads/callback*  and nothing else not even normal URL https://www-uat.corpoint.be/&nbsp;

anupamg_354580 · Answer

Dears , Eagerly waiting for  a response ; I am a newbie to irules&nbsp;

youssef1 · Answer

Hi,
try this:
when HTTP_REQUEST {

if { !([string tolower [HTTP::path]] starts_with "/rest/leads/callback" )
&amp;&amp; ( [IP::addr [IP::client_addr] equals 76.3.3.3/32] ) } {
    log local0. "dropped"
    HTTP::respond 200 content "URL Blocked"
} 
}

You can also used data group if you have multiple URI, it can help you:
https://devcentral.f5.com/questions/restricting-access-to-uri-based-on-ip-address
Regards

Forum Discussion

Restricting access to a client to only access certain URI and nothing else

2 Replies

Recent Discussions

F5 Rseries HA

Error when running bigip_command Playbook against LTM : Syntax Error: unexpected argument /bin/sh\n

Can iRule be used to perform exception of IPI category based on Geolocation

Can iRule mask the payload content on event logs of security

minimum tmos software version for connect CIS (openshift)

Related Content

Office 365 Tenant Restrictions

SSL Orchestrator Advanced Use Cases: Enabling GCloud Organization Restrictions

F5 iRule Geolocation restriction

Irule for restricting access

Restricting Access to Virtual from client IP address in X-Forwarder-For HTTP header