RE: BLOCK A URL at the ingress interface.

From: Shine Joseph (shinepjoseph@iprimus.com.au)
Date: Thu Sep 27 2007 - 17:30:35 ART

• Next message: Jason Guy \(jguy\): "RE: LSAP Type Code"
• Previous message: Jason Guy \(jguy\): "RE: DOS ATTACK non-intial and FRAGMENTS"
• Maybe in reply to: Carlos Trujillo Jimenez: "BLOCK A URL at the ingress interface."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

If you change your match criteria to the following, it should work.

match protocol http host "www.cisco.com"

HTH,
Shine

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Carlos Trujillo Jimenez
Sent: Friday, 28 September 2007 5:04 AM
To: ccielab@groupstudy.com
Subject: BLOCK A URL at the ingress interface.

I want to block access to www.cisco.com from my lan network.
Dont know whats wrong with the above config, please if someone can check.

class-map match-all PRUEBA-DROP
match protocol http url "http://www.cisco.com"

policy-map PRUEBA
class PRUEBA-DROP
   drop

interface BVI1
description Lan
service-policy input PRUEBA

• Next message: Jason Guy \(jguy\): "RE: LSAP Type Code"
• Previous message: Jason Guy \(jguy\): "RE: DOS ATTACK non-intial and FRAGMENTS"
• Maybe in reply to: Carlos Trujillo Jimenez: "BLOCK A URL at the ingress interface."
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Oct 06 2007 - 12:01:16 ART