Match rule to drop request?

[sladd]

I'm trying to configure a match rule on an Equalizer 450GX to drop inbound requests containing particular substrings in the path and/or filename.  This is in the interest of closing a PCI vulnerability (CVE 2007-2897) involving DoS attacks based on URLs containing MS-DOS device names.  I'm hoping to set up match rules that will check for the offending strings and drop or reject the request, refusing to forward it on to any server in any pool.

Can this be done via Equalizer match rules?

Thanks,

Shane

[Petey247]

It appears to work.  I created a matching rule that aborted the request if I sent along the filename test.aspx.  You could even add a responder to forward it to another destination if you wanted (I had it redirect to google.com as a test).