HP VPN Firewall Appliances Attack Protection Command Reference

100
Parameters
url-hostname: Specifies the URL hostname, a case-insensitive string of 1 to 80 characters. The argument
supports the wildcards caret (^), asterisk (*), ampersand (&), and dollar sign ($).
Usage guidelines
You can add up to 16 hostnames to a URL hostname filtering entry.
Follow these wildcard usage rules to configure URL hostnames:
• The caret (^) identifies the beginning of a hostname. Make sure that the caret (^) is the first
character of a hostname.
• The dollar sign ($) identifies the end of a hostname. Make sure that the dollar sign ($) is the last
character of a hostname.
• The ampersand (&) stands for a character except for a space and a dot (.). It can be present
multiple times at any position of a hostname, consecutively or inconsecutively, but cannot be used
with asterisk (*).
• The asterisk (*) stands for any characters except for a dot (.). Make sure that the asterisk (*) is at the
beginning or in the middle of a hostname, but not at the end of a hostname or next to caret (^) or
($).
• A hostname with caret (^) at the beginning or dollar sign ($) at the end denotes exact matching. For
example, hostname ^webfilter matches websites starting with webfilter (such as webfilter.com.cn)
or websites such as cmm.webfilter-any.com. Hostname ^webfilter$ matches websites containing
standalone webfilter like www.webfilter.com but does not match websites like
www.webfilter-china.com.
• A hostname with neither caret (^) at the beginning nor dollar sign ($) at the end denotes fuzzy
matching, and matches websites containing the hostname.
• If asterisk (*) is at the beginning of a filtering entry, it must be in the format of *.xxx, where xxx
represents a keyword, for example, *.com or *.webfilter.com.
• A hostname with only numerals is invalid. To filter a website like www.123.com, you can define a
hostname like ^123$, www.123.com, or 123. c om , instead of 123 . HP recommends that you use
exact matching to filter numeral websites.
Examples
# Add a hostname www.CounterStrike.com to the URL hostname filtering entry HostofGame.
<Sysname> system-view
[Sysname] content-filtering url-hostname-entry HostofGame
[Sysname-contflt-url-hostname-HostofGame] url-hostname fix-string www.CounterStrike.com
url-ip-blocking enable
Use url-ip-blocking enable to enable URL IP address blocking.
Use undo url-ip-blocking enable to restore the default.
Syntax
url-ip-blocking enable
undo url-ip-blocking enable
Default
URL IP address blocking is disabled.