Firewall Http Url-Filter Host Url-Address - HP HSR6600 Command Reference Manual

firewall http url-filter host url-address

Use firewall http url-filter host url-address to add a URL address filtering entry and set the filtering action.
Use undo firewall http url-filter host url-address to remove one or all URL address filtering entries.
Syntax
firewall http url-filter host url-address { deny | permit } url-address
undo firewall http url-filter host url-address [ url-address ]
Views
System view
Default command level
2: System level
Parameters
deny: Denies matched URL addresses.
permit: Permits matched URL addresses.
url-address: URL address filtering entry, a case-insensitive string of 1 to 80 characters. Valid characters
include digits, English letters, dot (.), hyphen (-), underline (_), and wildcards caret (^), dollar sign ($),
ampersand (&), and asterisk (*).
Table 73 Wildcard meanings
Wildcard
^
$
&
*
When using the wildcards, follow these rules:
• A filtering entry with caret (^) at the beginning or dollar sign ($) at the end indicates an exact match.
For example, filtering entry ^webfilter matches website addresses starting with webfilter (such as
webfilter.com.cn) or containing webfilter at the beginning of a string after a dot (such as
cmm.webfilter-any.com). Filtering entry ^webfilter$ matches website addresses containing
standalone webfilter like www.webfilter.com. It does not match website addresses like
www.webfilter-china.com.
A filtering entry with neither caret (^) at the beginning nor dollar sign ($) at the end indicates a
•
fuzzy match, and matches website addresses containing the keyword.
Meaning
Matches website addresses
starting with the keyword
Matches website addresses ending
with the keyword
Stands for a valid character other
than dot (.)
Stands for any number of valid
characters and spaces excluding
dot (.)
453
Usage guidelines
It can be present once at the
beginning of a filtering entry.
It can be present once at the end of
a filtering entry.
It can be present multiple times at
any position of a filtering entry,
consecutively or inconsecutively,
but cannot be used together with
asterisk (*).
It can be present once at the
beginning or in the middle of a
filtering entry. It cannot be at the
end and cannot be used next to
caret (^) or dollar sign ($).