<![CDATA[ACL with multi Action]]>Hi all, looking for some help getting some specific rules working

in raw HA the config is

frontend Threadfin
        bind                    *my ip*:34400 name *my ip*:34400
        bind                    *my int ip*:34400 name *my int ip*:34400
        mode                    http
        log                     global
        option                  http-keep-alive
        timeout client          30000
        acl                     http    var(txn.txnpath) -m sub -i images
        acl                     https   var(txn.txnpath) -m sub -i images
        http-request set-var(txn.txnpath) path
        http-request replace-value Host (.*):34400 \1:443
        http-request redirect location https://%[req.hdr(Host)]%[capture.req.uri]  if  https
        use_backend Threadfin_ipvANY  if  !http

the issue is getting

http-request replace-value Host (.*):34400 \1:443
http-request redirect location https://%[req.hdr(Host)]%[capture.req.uri]  if  https

in to one rule, i can get the first line in just not the seccond
1928ebd7-8bff-4b73-8d5a-f098a078d25e-image.png

]]>https://forum.netgate.com/topic/197718/acl-with-multi-actionRSS for NodeMon, 15 Jun 2026 08:05:41 GMTThu, 05 Jun 2025 12:28:34 GMT60<![CDATA[Reply to ACL with multi Action on Thu, 05 Jun 2025 13:05:12 GMT]]>@jonny190 said in ACL with multi Action:

in to one rule, i can get the first line in just not the seccond

So add a second one.
The original config has also two rule for what you want.

BTW: the original rule looks a bit different than yours. It seems, to also replace the last octet of the IP.

]]>https://forum.netgate.com/post/1216834https://forum.netgate.com/post/1216834Thu, 05 Jun 2025 13:05:12 GMT