Forum Discussion

Fastidious's avatar
Fastidious
Icon for Altostratus rankAltostratus
Jun 21, 2024
Solved

Help with iRule

Good day all! I have the following iRule: when HTTP_REQUEST { if { ([HTTP::host] eq "lists.example.com") and ([HTTP::uri] eq "/cgi-bin/wa?INDEX" || [HTTP::uri] eq "/cgi-bin/wa?MOD" || [HTTP::uri...
irule
LTM VE
  • JRahm's avatar
    JRahm
    Jun 21, 2024

    You can negate that second IF as well to avoid the else

    when HTTP_REQUEST priority 500 {
    if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) &&
         !(([HTTP::host] eq "lists.example.com") && ([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*")) } {
        HTTP::redirect "https://www.google.com"
    }
}

     

Fastidious's avatar
Fastidious
Icon for Altostratus rankAltostratus

Or this, rather:

when HTTP_REQUEST priority 500 {
  if { ![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"] } {
    if { ([HTTP::host] eq "lists.example.com") && ([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*") } { 
          return 
    } else {
          HTTP::redirect "https://www.google.com"
    }
  }
}

I know we are close, so I am not certain on how to "wrap it up".  ðŸ˜…

JRahm's avatar
JRahm
Icon for Admin rankAdmin
Jun 21, 2024

You can negate that second IF as well to avoid the else

when HTTP_REQUEST priority 500 {
    if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) &&
         !(([HTTP::host] eq "lists.example.com") && ([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*")) } {
        HTTP::redirect "https://www.google.com"
    }
}

 

  • Fastidious's avatar
    Fastidious
    Icon for Altostratus rankAltostratus
    Jun 21, 2024

    Did you miss the ! on `!([HTTP::uri]...`?

    • JRahm's avatar
      JRahm
      Icon for Admin rankAdmin
      Jun 21, 2024

      looks like I just put it in the wrong place! Updated above.

  • Fastidious's avatar
    Fastidious
    Icon for Altostratus rankAltostratus
    Jun 21, 2024

    JRahmso, this is "working":

    when HTTP_REQUEST priority 500 {
    if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) &&
         (([HTTP::host] eq "lists.example.com") && !([HTTP::uri] matches_glob "/cgi-bin/wa?SUBEDIT1*")) } {
        HTTP::redirect "https://www.google.com"
    }
}

    But images are all broken. It is creating a weird CORS/redirect problem

    • JRahm's avatar
      JRahm
      Icon for Admin rankAdmin
      Jun 21, 2024

      might be either a missing use case or the logic is slightly off. If use add the else back in and add return to that block does it fix?

      • Fastidious's avatar
        Fastidious
        Icon for Altostratus rankAltostratus
        Jun 24, 2024

        I had to account for more, and there are other URIs within the page, and those will be blocked because to not match the glob. So:

        when HTTP_REQUEST {
    if { (![class match -- [IP::client_addr] eq "LISTSERV-TST_Allowed_IPs"]) &&
         (([HTTP::host] eq "lists.example.com") && !([HTTP::uri] matches_glob "/cgi-bin/wa?SUBED1*") && !([HTTP::uri] matches_glob "/archives/images/*")) } {
              HTTP::redirect "https://www.google.com"
    } else {
        return
    }
}