topic Re: HINET.NET in Network Security

HINET.NET

georgarthr — Mon, 11 Mar 2019 19:21:45 GMT

I have a Cisco 2600 and would like to block traffic from hinet.net by hostname. does anyone have any suggestions?

Thanks,

George Christiansen

georgarthr@verizon.net

Re: HINET.NET

Maykol Rojas — Tue, 14 Dec 2010 13:34:44 GMT

Hello George,

If I am not mistaken, those guys support what is called CBAC (if you have an image on the router such as advance security or advance ip services) the commands would be like this

ip url-filter exclusive-domain deny hnet.net

ip url-filter allow-mode on

ip inspect name FW http url-filter

int fa 0/1

ip inspect FW in

Assuming that the interface fa 0/1 are the hosts that you would like to block this page from.

Hope this helps.

Mike

Re: HINET.NET

Panos Kampanakis — Tue, 14 Dec 2010 20:10:10 GMT

Hi George,

Or as explained here http://www.cisco.com/en/US/products/hw/routers/ps359/products_tech_note09186a00800fc176.shtml

class-map match-any blocked-urls-cm
  match protocol http url "*hinet.net *"
policy-map mark-blocked-urls-pm
  class blocked-urls-cm 
    set ip dscp 1
interface Fa0/0  <--- interface facing your clients browsing
  service-policy input mark-blocked-urls-pm
access-list 105 deny ip any any dscp 1 
access-list 105 permit ip any any
interface ethernet 0/1 <--- interface facing your ISP
  ip access-group 105 out

I hope it helps.