URL Filtering on Cisco

Hi Guys,

Have you ever tried filtering url in cisco router ?

Well, I just tried it and it doen't work, don't know what's wrong.

This is my config for class-map

Class-map: mark (match-all)

      0 packets, 0 bytes

      5 minute offered rate 0 bps, drop rate 0 bps

      Match: protocol http mime "*.yahoo.com"

      Match: protocol http url "*.yahoo.com"

      Match: protocol http url "*.yahoo.com/*"

      Match: protocol http url "*yahoo.com*"

      Match: protocol http url "*"

      Match: protocol http host "*yahoo*"

      Drop

As you can see, First, the only thing i want to do is just to filter
everything about yahoo.

But, it seems like no effect in this scheme, so I just tried to block it all
by using match protocol http *

But the result is, I still can browse to web sites, no effect at all

So the scenario is, I just have one router with two interfaces

One going to inside and the other going outside

These are the configs :

interface Ethernet0/0

 description Outside

 ip address
 ip nat outside

 ip virtual-reassembly

 half-duplex

 service-policy input mark

!

interface FastEthernet0/0

 description Inside

 ip address 192.168.1.1 255.255.255.0

 ip nat inside

 ip virtual-reassembly

 speed auto

 service-policy input mark

 service-policy output mark

any clue whats wrong ?

Regards

Mark Stephanus Chandra - CCIE#23887
IT Consultant

Blogs and organic groups at http://www.ccie.net
Received on Fri Feb 12 2010 - 01:21:46 ART