CSS ACL URL Parameter filtering

muhammadsafwan · ‎07-16-2008

Hi all,

I have a pair of redundant CSS11503 load-balancing two HTTP servers. Recentyly the webserver is being attacked by some malicious script that run through the web server to go to other place.

I need to deny the parameter of the url that attacking the web server.

Example:

http://www.cisco.com/ciscobb/?CPURL=http://gamedl.qq.com/

I need to block the "http://gamedl.qq.com/" parameters.

Anybody can shed some light into this issue?

Thanks

Gilles Dufour · ‎07-16-2008

that won't be possible.

The CSS doesn't parse url after the '?'

You'll to bock this traffic somewhere else.

Gilles.

muhammadsafwan · ‎07-16-2008

then i can't block any parameter at all?

is there any suggestion to solve this issue?