RE: Application filtering - URL Filtering

From: Salau,Olayemi (Olayemi.Salau@southampton.gov.uk)
Date: Fri Jan 19 2007 - 08:02:51 ART


Hello Raj,

As you know, url differs from hosts

So If I do:

match protocol http host "www.cisco.com" ~~~~~~~~~~ this is different to
if I say match protocol http url "/root.exe"

One deals with the source, the other deals with a web directory/file
within the source

Before I get too boring, you'll have to include the frontslash "/" after
the main domain. I prefer using the star character "*" though, this will
match anything before the specified strings.

Like I said, I will be better off doing match protocol http url
"*root.exe*" instead,

However, the following will match "http://www.cisco.com/root.exe"

match protocol http host "www.cisco.com" <---------------- That
matches the host/domain

match protocol http url "/root.exe" <----------------
That matches the directory/file specified

will you be using class-map match-any or class-map match-all?

If match-any, all url directories and files on host www.cisco.com will
be matched anyway, since they're all coming from same host and it's the
first match line

If match-all, then only /root.exe from www.cisco.com host will be
matched

Another Example:- if I want to match the home page of the Universal CD:
http://www.cisco.com/univercd/home/home.htm

match protocol http host "www.cisco.com"

match protocol http url "/univercd/home/home.htm"

This will match the homepage directly

OR Simply

match protocol http host "www.cisco.com"

match protocol http url "*home.htm"

Hope this helps

Many Thanks



This archive was generated by hypermail 2.1.4 : Thu Feb 08 2007 - 23:46:57 ART