Firewall Http Url-Filter Parameter - HPE FlexNetwork HSR6800 Security Command Reference

Table 71 Wildcard meanings
Wildcard
^
$
&
*
When using the wildcards, follow these rules:
•
A filtering entry with caret (^) at the beginning or dollar sign ($) at the end indicates an exact
match. For example, filtering entry ^webfilter matches website addresses starting with
webfilter (such as webfilter.com.cn) or containing webfilter at the beginning of a string after a
dot (such as cmm.webfilter-any.com). Filtering entry ^webfilter$ matches website addresses
containing standalone webfilter like www.webfilter.com. It does not match website addresses
like www.webfilter-china.com.
•
A filtering entry with neither caret (^) at the beginning nor dollar sign ($) at the end indicates a
fuzzy match, and matches website addresses containing the keyword.
•
If asterisk (*) is present at the beginning of a filtering entry, it must be present in the format like
*.xxx, where xxx represents a keyword, for example, *.com or *.webfilter.com.
•
A filtering entry with only numerals is invalid. To filter a website address like www.123.com, you
can define a filtering entry like ^123$, www.123.com, or 123.com, instead of 123. Hewlett
Packard Enterprise recommends that you use exact match to filter numeral website addresses.
Usage guidelines
The device supports a maximum of 256 URL address filtering entries.
You can change the filtering action for an existing filtering entry, for example, from deny to permit.
Examples
# Add filtering entry ^china& to the URL address filtering entry list and set the filtering action to
permit.
<Sysname> system-view
[Sysname] firewall http url-filter host url-address permit ^china&
Related commands
display firewall http url-filter host

firewall http url-filter parameter

Use firewall http url-filter parameter to add URL parameter filtering entries to the URL parameter
filtering entry list.
Use undo firewall http url-filter parameter to remove URL parameter filtering entries from the list.
Meaning
Matches website addresses
starting with the keyword
Matches website addresses
ending with the keyword
Stands for a valid character other
than dot (.)
Stands for any number of valid
characters and spaces excluding
dot (.)
411
Usage guidelines
It can be present once at the
beginning of a filtering entry.
It can be present once at the end
of a filtering entry.
It can be present multiple times at
any position of a filtering entry,
consecutively or inconsecutively,
but cannot be used together with
asterisk (*).
It can be present once at the
beginning or in the middle of a
filtering entry. It cannot be at the
end and cannot be used next to
caret (^) or dollar sign ($).