blocking sites with class-map

[blacktulip]

i have 3750 as DG for my station, connected to 3845 which is connected to ADSL.

i want to block a site, so i wrote in the 3845:

class-map match-any scum

match protocol http url "*microsoft*"

!

policy-map block

class scum

drop

!

interface GigabitEthernet0/0

service-policy input block

it doesn't work. why?

[Edison Ortiz · Accepted solution]

You should match a host instead of an url, try this syntax:

class-map match-any scum

match protocol http host "www.microsoft*"