411
Table 71 Wildcard meanings
Wildcard Meaning Usage
guidelines
^
Matches website addresses
starting with the keyword
It can be present once at the
beginning of a filtering entry.
$
Matches website addresses
ending with the keyword
It can be present once at the end
of a filtering entry.
&
Stands for a valid character other
than dot (.)
It can be present multiple times at
any position of a filtering entry,
consecutively or inconsecutively,
but cannot be used together with
asterisk (*).
*
Stands for any number of valid
characters and spaces excluding
dot (.)
It can be present once at the
beginning or in the middle of a
filtering entry. It cannot be at the
end and cannot be used next to
caret (^) or dollar sign ($).
When using the wildcards, follow these rules:
•
A filtering entry with caret (^) at the beginning or dollar sign ($) at the end indicates an exact
match. For example, filtering entry
^webfilter
matches website addresses starting with
webfilter
(such as
webfilter.com.cn
) or containing
webfilter
at the beginning of a string after a
dot (such as
cmm.webfilter-any.com
). Filtering entry
^webfilter$
matches website addresses
containing standalone
webfilter
like
www.webfilter.com
. It does not match website addresses
like
www.webfilter-china.com
.
•
A filtering entry with neither caret (^) at the beginning nor dollar sign ($) at the end indicates a
fuzzy match, and matches website addresses containing the keyword.
•
If asterisk (*) is present at the beginning of a filtering entry, it must be present in the format like
*.xxx
, where xxx represents a keyword, for example,
*.com
or
*.webfilter.com
.
•
A filtering entry with only numerals is invalid. To filter a website address like
www.123.com
, you
can define a filtering entry like
^123$
,
www.123.com
, or
123.com
, instead of
123
. Hewlett
Packard Enterprise recommends that you use exact match to filter numeral website addresses.
Usage guidelines
The device supports a maximum of 256 URL address filtering entries.
You can change the filtering action for an existing filtering entry, for example, from deny to permit.
Examples
# Add filtering entry
^china&
to the URL address filtering entry list and set the filtering action to
permit.
<Sysname> system-view
[Sysname] firewall http url-filter host url-address permit ^china&
Related commands
display firewall http url-filter host
firewall http url-filter parameter
Use
firewall http url-filter parameter
to add URL parameter filtering entries to the URL parameter
filtering entry list.
Use
undo firewall http url-filter parameter
to remove URL parameter filtering entries from the list.
