Hi,

I dug around a bit and couldn't figure this out and was hoping you guys
could point me in the right direction.

I've got a server running like this (verson 1.13, condensed version):


*frontend http *:80*
*  grace 10000 # don't kill for 10 seconds*
*  mode http*
*  acl badhost_src src 64.13.138.185/32*
*  block if badhost_src*
*  default_backend unsecure*
*  timeout client 60s*
*  option httpclose*
*
*
*
*
*backend **unsecure*
*  mode http*
*  balance roundrobin*
*  option forwardfor*
*  option httpchk HEAD / HTTP/1.0*
*  server blah blah:5550 check slowstart 5000*
*
*
*
*
*listen secure *:443*
*  grace 10000 # don't kill for 10 seconds*
*  mode tcp*
*  balance roundrobin*
*  option forwardfor*
*  server blah blah:5501 check slowstart 5000*
*
*
*
*
*
*
*
*
So I recently noticed, that I'm not blocking IPs for the secure connections!
I'd like to start doing this.

I've got like 60 different IPs blocked (via *acl badhost_src src).  *Is
there a way i can reuse the ACL logic between my port 80 and port 443
configuration?


Thanks,
-Michael

Reply via email to