Block user agent except some IP adressess?

Website, Application, Performance Security
1

I am using the following rule in order to block user_agent and allow multiple IPs, but I don’t know if it is correct.
Can anyone give an opinion on how this rule would be correct?

(http.request.uri.path contains "/wolf" and http.user_agent eq "Mozilla/5.0 (Linux; Android 10; ELE-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" and ip.src ne 212.56.57.58)

2

Hi,

The rule as created would be triggered if the UA matches, but only in visits to paths that contain /wolf, and should exclude visits from the IP listed. If that’s the intention, then it looks ok. To test whether the rule is working, you can use your browser’s Developer Tools > Network Conditions to set the UA, then make 2 requests, one from the IP being bypassed, another from another IP address.

1 Like
3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.