Java Blocking Configuration Example - HP A6600 Configuration Manual

Java blocking configuration example

Network requirements
The hosts in the network segment 192.168.1.0/24 access the Internet through the router. Enable Java
blocking on the router, add suffix keyword .js, and configure the router to allow only Java applet
requests to the website at 5.5.5.5.
Figure 131 Network diagram for Java blocking configuration
Configuration procedure
# Configure IP addresses for the interfaces. (Omitted)
# Configure the NAT policy for the outbound interface.
<Router> system-view
[Router] acl number 2200
[Router-acl-basic-2200] rule 0 permit source 192.168.1.0 0.0.0.255
[Router-acl-basic-2200] rule 1 deny source any
[Router-acl-basic-2200] quit
[Router] nat address-group 1 2.2.2.10 2.2.2.11
[Router] interface gigabitethernet 1/0/1
[Router-GigabitEthernet1/0/1] nat outbound 2200 address-group 1
[Router-GigabitEthernet1/0/1] quit
# Configure an ACL numbered 2100 for Java blocking.
[Router] acl number 2100
[Router-acl-basic-2100] rule 0 permit source 5.5.5.5 0.0.0.0
[Router-acl-basic-2100] rule 1 deny source any
[Router-acl-basic-2100] quit
# Enable the Java blocking function, add blocking suffix keyword .js, and specify ACL 2100 for Java
blocking.
[Router] firewall http java-blocking enable
[Router] firewall http java-blocking suffix .js
[Router] firewall http java-blocking acl 2100
382