beautypg.com

Configuring web filtering, Configuring url parameter filtering, Configuring java blocking – H3C Technologies H3C SecPath F1000-E User Manual

Page 102: Configuring activex blocking

background image

3

the request is forwarded; otherwise, the suffix is replaced with “.block” and then the request is
forwarded.

In addition to the default suffix “.ocx”, you can add ActiveX blocking suffixes (that is, the filename
suffixes to be replaced in HTTP requests) through command lines.

Configuring Web Filtering

URL parameter filtering, Java blocking, and ActiveX blocking can be enabled independently.

Configuring URL Parameter Filtering

Follow these steps to configure URL parameter filtering:

To do...

Use the command...

Remarks

Enter system view

system-view

Enable the URL parameter filtering
function

firewall http url-filter
parameter enable

Required
Disabled by default

Add a URL parameter filtering

entry

firewall http url-filter
parameter
{ default |
keywords
keywords }

Required

Display information about URL
parameter filtering

display firewall http url-filter
parameter
[ all | item
keywords | verbose ]

Optional

Configuring Java Blocking

Follow these steps to configure Java blocking:

To do...

Use the command...

Remarks

Enter system view

system-view

Add a Java blocking suffix
keyword

firewall http java-blocking
suffix
keywords

Optional

Display information about Java
blocking

display firewall http
java-blocking
[ all | item
keywords | verbose ]

Optional

NOTE:

In the ACL for Java blocking, you need to configure the source IP addresses as the IP addresses of the HTTP
servers allowed to be accessed, and set the action to permit.

Configuring ActiveX blocking

Follow these steps to configure ActiveX blocking: