01-21-2010 01:29 PM
Hello,
I need some help in setting up URL filtering.
I.E http://test.com/class/results.asp?search_type=class&display_full=1&cn=&ct=0&cs=0&k=%27%3B
I want to look for characters in that link such as ' or ; and drop the traffic if it matches it or to send it to the serverfarm if it does not.
Thanks!!
class-map type http loadbalance match-any MAL-TRAFFIC-DROP
2 match http url /((\%3D)|(=))[^\n]*((\%27)|(\')|(\-\-)|(\%3B)|(;))/ix
policy-map type loadbalance first-match WEB-SLB
class MAL-TRAFFIC-DROP
drop
class class-default
serverfarm WEB-SF
01-25-2010 01:35 PM
You seem to have posted the answer too. (-: Isn't it working? Though I haven't parsed the whole regexp...
01-29-2010 08:40 AM
It doesn't seem to be working. When I run the show service-policy command, I dont' see any drops/resets?
I am not sure if there's a better way to do it.
Thanks!
01-30-2010 08:23 AM
maybe a trailing .* is needed in the regexp, I don't know what URLs you're testing with
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: