H3C SecPath Series

16
standalone webfilter like www.webfilter.com; it does not match website addresses like
www.webfilter-china.com.
• A filtering entry with neither “^” at the beginning nor “$” at the end indicates a fuzzy match, and
matches website addresses containing the keyword.
• If “*” is present at the beginning of a filtering entry, it must be present in the format like *.xxx, where
xxx represents a keyword, for example, *.com or *.webfilter.com.
• A filtering entry with only numerals is invalid. To filter a website address like www.123.com, you can
define a filtering entry like ^123$, www.123.com, or 123 .c om , instead of 123 . In other words, use
exact match to filter numeral website addresses.
Description
Use the firewall http url-filter host url-address command to add a URL address filtering entry and set the
filtering action.
Use the undo firewall http url-filter host url-address command to remove one or all URL address filtering
entries.
The firewall supports a maximum of 256 URL address filtering entries.
You can change the filtering action for an existing filtering entry, for example, from deny to permit.
Related commands: display firewall http url-filter host.
Examples
# Add filtering entry ^china& to the URL address filtering entry list and set the filtering action to permit.
<Sysname> system-view
[Sysname] firewall http url-filter host url-address permit ^china&
firewall http url-filter parameter
Syntax
firewall http url-filter parameter { default | keywords keywords }
undo firewall http url-filter parameter [ default | keywords keywords ]
View
System view
Default level
2: System level
Parameters
default: Specifies to use the default parameter filtering entries, including: ^select$, ^insert$, ^update$,
^delete$, ^drop$, --, ', ^exec$, and %27.
keywords keywords: Specifies to use a user-defined parameter filtering entry. The keywords argument is
a case-insensitive string of 1 to 80 characters. Valid characters include numerals, English letters,
wildcards (‘^’, ‘$’, ‘&’ and ‘*’), and other ASCII characters with values in the range 31 to 127.A filtering
entry can be a string with spaces, but such an entry must be present in quotes, for example, “select all”.
One space in a filtering entry can match multiple consecutive spaces in a URL parameter of an HTTP
request. For meanings of the wildcards, see Table 7.