Forum Discussion

  • Ozzy's avatar
    Ozzy
    Icon for Altocumulus rankAltocumulus

    hello ,

    yes it is possible.. here is the example.. 

    when HTTP_REQUEST {
        set srcip [IP::client_addr]
        if { [HTTP::header exists "X-Forwarded-For"] } {
            set srcip [HTTP::header "X-Forwarded-For"]
            #log local0. "USER-SOURCE $srcip"
        }
     
        if  { [HTTP::path] starts_with "/xzy" } {
            switch $srcip {
                "13.174.130.182" -
                "31.121.101.157" -
                "35.77.107.183" {
              ACCESS::disable
                }
            }
        }
    }