From: Joseph D. Phillips (josephdphillips@fastmail.us)
Date: Sat Sep 18 2004 - 10:44:20 GMT-3
I didn't see a reference to nbar in your configs.
I think you have to enable nbar protocol discovery under your interface(s).
Julian Skelley wrote:
>Hi Joseph
>
>I tried this last night with no success, I have set it up as the doc suggest but can not seem to "catch" anything with the map.
>
>I must have missed something but I am not sure what?!
>
>Can anyone help?
>
>Thanks
>J
>
>The set up was:
>
>WWW_SERVER---174.1.167.x---[r6]---174.1.26.x---BROWSER
>
>r6
>ip cef
>!
> class-map match-any PICS
> match protocol http mime "*jpg"
> match protocol http mime "*gif"
> match protocol http mime "*jpeg"
>!
> policy-map HTTP_OUT
> class PICS
> drop
>!
>interface FastEthernet0/0.26
> encapsulation dot1Q 26
> ip address 174.1.26.6 255.255.255.0
> service-policy output HTTP_OUT
>
>r6#sh policy-map int f0/0.26
> FastEthernet0/0.26
>
> Service-policy input: HTTP_OUT
>
> Class-map: PICS (match-any)
> 0 packets, 0 bytes
> 5 minute offered rate 0 bps, drop rate 0 bps
> Match: protocol http mime "*jpg"
> 0 packets, 0 bytes
> 5 minute rate 0 bps
> Match: protocol http mime "*gif"
> 0 packets, 0 bytes
> 5 minute rate 0 bps
> Match: protocol http mime "*jpeg"
> 0 packets, 0 bytes
> 5 minute rate 0 bps
> drop
>
> Class-map: class-default (match-any)
> 5972 packets, 434656 bytes
> 5 minute offered rate 0 bps, drop rate 0 bps
> Match: any
>
>-----Original Message-----
>From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
>Joseph D. Phillips
>Sent: 17 September 2004 17:52
>To: group study
>Subject: MQC to filter MIME-types
>
>
>If you wanted to filter out all picture files from entering an
>interface, would you have to specify every extension, using MQC? Or is
>there a way to filter them all at once?
>
>E.g. match protocol http mime "*jpeg"
>E.g. match protocol http mime "*tiff"
>E.g. match protocol http mime "*jpg"
>E.g. match protocol http mime "*gif"
>E.g. match protocol http mime "*bmp"
>
>_______________________________________________________________________
>Subscription information may be found at:
>http://www.groupstudy.com/list/CCIELab.html
>*********************************************************
>CONFIDENTIALITY NOTICE
>The information contained in this e-mail and any
>attachments to it are for the exclusive use of the
>intended recipient(s).
>It may be confidential and contain privileged information and will be protected by copyright.
>If you are not the intended recipient(s) you must not review, copy, distribute or in any other way use or rely on the information contained in the message.
>
>If you have received this e-mail in error, please notify us by e-mail Administrator@itex.je, Tel: +44 1534 633633 or Fax: +44 1534 633644 and then delete all copies from your system.
>
>http://www.Itex.je
>http://www.Itex.gg
>http://www.ThisisJersey.com
>http://www.ThisisGuernsey.com
>
>*********************************************************
>
>This message has been checked for all known viruses by e:)scan. For further information visit: http://www.activis.com/
This archive was generated by hypermail 2.1.4 : Fri Oct 01 2004 - 15:00:45 GMT-3