H3C Technologies H3C SecPath F1000-E - Manual (Page 102)

3
the request is forwarded; otherwise, the suffix is replaced with “.block” and then the request is
forwarded.
• In addition to the default suffix “.ocx”, you can add ActiveX blocking suffixes (that is, the filename
suffixes to be replaced in HTTP requests) through command lines.
Configuring Web Filtering
URL parameter filtering, Java blocking, and ActiveX blocking can be enabled independently.
Configuring URL Parameter Filtering
Follow these steps to configure URL parameter filtering:
To do... Use the command... Remarks
Enter system view system-view —
Enable the URL parameter filtering
function firewall http url-filter
parameter enable
Required
Disabled by default
Add a URL parameter filtering
entry
firewall http url-filter
parameter { default |
keywords keywords }
Required
Display information about URL
parameter filtering
display firewall http url-filter
parameter [ all | item
keywords | verbose ]
Optional
Configuring Java Blocking
Follow these steps to configure Java blocking:
To do... Use the command... Remarks
Enter system view system-view —
Add a Java blocking suffix
keyword firewall http java-blocking
suffix keywords
Optional
Display information about Java
blocking
display firewall http
java-blocking [ all | item
keywords | verbose ]
Optional
NOTE:
In the ACL for Java blocking, you need to configure the source IP addresses as the IP addresses of the HTTP
servers allowed to be accessed, and set the action to permit.
Configuring ActiveX blocking
Follow these steps to configure ActiveX blocking: