ProxySG Content Policy Language Guide
260
define subnet
Binds a user-defined label to a set of IP addresses or IP subnet patterns. Use a subnet definition label
with any of the conditions that test part of the transaction as an IP address, including:
client.address=, proxy.address=, request.header.header_name.address=,
request.x_header.header_name.address, and server_url.address=.
The listed IP addresses or subnets are considered to have a Boolean OR relationship, no matter
whether they are all on one line or separate lines.
Syntax
define subnet label
{ ip_address | subnet } { ip_address | subnet } ...
...
end [subnet label]
where:
•
label—A user-defined identifier for this subnet definition.
•
ip_address—IP address; for example, 10.1.198.0.
•
subnet—Subnet specification; for example, 10.25.198.0/16.
Example
define subnet local_net
1.2.3.4 1.2.3.5 ; can list individual IP addresses
2.3.4.0/24 2.3.5.0/24 ; or subnets
end
<proxy>
client.address=!local_subnet deny
See Also
• Conditions:
client.address=, proxy.address=, request.header.header_name.address=,
request.x_header.header_name.address, and server_url.address=
