> I'm checking byte 0 and 2, not 0 and 1, so it's more 80??01 

True.

You could combine anonymous ACLs:
use_backend bk2 if { payload(0,1) -m bin 80 } { payload(2,1) -m bin 01 }


You may just wanna try:
use_backend bk2 if { req_ssl_ver 2}

But that may do some additional checks, or check in different
layers (hello version vs record layer version). So it depends
what exactly you wanna match.



Lukas

                                          

Reply via email to