12-13-2010 08:13 PM - edited 03-11-2019 12:21 PM
I have a Cisco 2600 and would like to block traffic from hinet.net by hostname. does anyone have any suggestions?
Thanks,
George Christiansen
12-14-2010 05:34 AM
Hello George,
If I am not mistaken, those guys support what is called CBAC (if you have an image on the router such as advance security or advance ip services) the commands would be like this
ip url-filter exclusive-domain deny hnet.net
ip url-filter allow-mode on
ip inspect name FW http url-filter
int fa 0/1
ip inspect FW in
Assuming that the interface fa 0/1 are the hosts that you would like to block this page from.
Hope this helps.
Mike
12-14-2010 12:10 PM
Hi George,
Or as explained here http://www.cisco.com/en/US/products/hw/routers/ps359/products_tech_note09186a00800fc176.shtml
class-map match-any blocked-urls-cm
match protocol http url "*hinet.net *"
policy-map mark-blocked-urls-pm
class blocked-urls-cm
set ip dscp 1
interface Fa0/0 <--- interface facing your clients browsing
service-policy input mark-blocked-urls-pm
access-list 105 deny ip any any dscp 1
access-list 105 permit ip any any
interface ethernet 0/1 <--- interface facing your ISP
ip access-group 105 out
I hope it helps.
PK
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide