MR_Freddy
Sep 19, 2019Nimbostratus
Drop connection for ActiveSync based on URI Query
Hi Guys,
If i need to drop the connection for "POST" /MS-Server-ActiveSync based on parameter value for URI query (EX: DeviceNO = xxx)
I did the following but without success using fiddler
when HTTP_REQUEST {
if { [string tolower [HTTP::uri]] starts_with "/Microsoft-Server-ActiveSync" } {
set test [URI::query [string tolower [HTTP::uri]] DeviceNo]
if { !([class match $test equals DeviceNo-DG]) } {
log local0. "blocked"
drop
log local0. "blocked2"
}
}
}
DeviceNO-DG is configured using "String DATA Group" with the needed DEVICENO
Any suggestion