topic Re: URL filtering via ACE 4710 in Application Networking

URL filtering via ACE 4710

Eunice.Moses — Thu, 21 Jan 2010 21:29:15 GMT

Hello,

I need some help in setting up URL filtering.

I want to look for characters in that link such as ' or ; and drop the traffic if it matches it or to send it to the serverfarm if it does not.

Thanks!!

class-map type http loadbalance match-any MAL-TRAFFIC-DROP
2 match http url /((\%3D)|(=))[^\n]*((\%27)|(\')|(\-\-)|(\%3B)|(;))/ix

policy-map type loadbalance first-match WEB-SLB
class MAL-TRAFFIC-DROP
drop
class class-default
serverfarm WEB-SF

Peter Koltl — Mon, 25 Jan 2010 21:35:38 GMT

You seem to have posted the answer too. (-: Isn't it working? Though I haven't parsed the whole regexp...

Eunice.Moses — Fri, 29 Jan 2010 16:40:06 GMT

It doesn't seem to be working. When I run the show service-policy command, I dont' see any drops/resets?

I am not sure if there's a better way to do it.

Thanks!

Peter Koltl — Sat, 30 Jan 2010 16:23:07 GMT

maybe a trailing .* is needed in the regexp, I don't know what URLs you're testing with