408
firewall http url-filter host acl
Use
firewall http url-filter host acl
to specify an ACL for URL address filtering.
Use
undo firewall http url-filter host acl
to cancel the configuration.
Syntax
firewall http url-filter host acl
acl-number
undo firewall http url-filter host acl
Default
No ACL is specified for URL address filtering.
Views
System view
Default command level
2: System level
Parameters
acl-number
: ACL number in the range of 2000 to 3999.
Usage guidelines
With the command configured, all web requests using IP addresses will be processed according to
the specified ACL.
If you specify multiple ACLs for URL address filtering, only the last one takes effect.
You can specify a non-existing ACL, but filtering based on the ACL takes effect only after you create
and configure the ACL correctly.
Examples
# Specify URL address filtering to permit web requests with website IP addresses permitted by ACL
2000.
<Sysname> system-view
[Sysname] acl number 2000
[Sysname-acl-basic-2000] rule 0 permit source 3.3.3.3 0.0.0.0
[Sysname-acl-basic-2000] quit
[Sysname] firewall http url-filter host acl 2000
Related commands
display firewall http url-filter host
firewall http url-filter host default
Use
firewall http url-filter host default
to specify the default action for URL address filtering, that is,
action to be taken for web requests whose URL addresses do not match the configured filtering
entries.
Syntax
firewall http url-filter host default
{
deny
|
permit
}
Default
The filtering action is
deny
.