Firewall Http Url-Filter Host Default - H3C SecPath Series Command Reference Manual

Parameters
acl-number: ACL number, in the range 2000 to 3999.
Description
Use the firewall http url-filter host acl command to specify an ACL for URL address filtering.
Use the undo firewall http url-filter host acl command to cancel the configuration.
By default, no ACL is specified for URL address filtering.
With the command configured, all Web requests using IP addresses will be processed according to the
specified ACL.
If you specify multiple ACLs for URL address filtering, only the last one takes effect.
You can specify a non-existing ACL, but filtering based on the ACL takes effect only after you create and
configure the ACL correctly.
Related commands: display firewall http url-filter host.
Examples
# Specify URL address filtering to permit Web requests with website IP addresses permitted by ACL
2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule 0 permit source 3.3.3.3 0.0.0.0
[Sysname-acl-basic-2000] quit
[Sysname] firewall http url-filter host acl 2000

firewall http url-filter host default

Syntax
firewall http url-filter host default { deny | permit }
View
System view
Default level
2: System level
Parameters
deny: Denies Web requests.
permit: Permits Web requests.
Description
Use the firewall http url-filter host default command to specify the default action for URL address filtering,
that is, action to be taken for Web requests whose URL addresses do not match the configured filtering
entries.
By default, the default filtering action is deny.
Related commands: display firewall http url-filter host.
Examples
# Specify the default filtering action as permit.
12