This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG 7.1: webfilter whitelisting with wildcards

Hi.

I'm trying a workaround to solve my miss-classified urls issue. to whitelist a bunch of subdomains i want to apply urls with wildcard.

I've enabled 'Allow content that does not match the criteria below.' and added 'http://*.dell.com' in 'Always allow these URLs/sites', but still getting "web request blocked, forbidden category detected" for http://i.dell.com.

Neither adding all involved urls ,nor disabling the whole category is an acceptable solution.

Does anyone have a alternative solution?

rgds

Luis

This thread was automatically locked due to age.

0 LuisMompoHanden over 18 years ago

RTFM: [8-)]

Astaro Knowledgebase

Under no circumstances should a "*" be used as part of a domain, as in *.domain.com as this will cause everything to be either allowed or blocked depending on the way the Content Filter is setup. The Astaro will see a "*" as "everything" and skip the rest of the section.
Cancel
Vote Up 0 Vote Down

Cancel
0 JuergenH over 18 years ago in reply to LuisMompoHanden

Hi.

Astaro actually uses the entries in the white/blacklists as a regular expression for a substring search (not only a good thing). In former installations (before 7.009) the entry described a URL/site - it's a very great difference.

If you only use a string like "dell.com" the dot will be interpreted as one "any character". So you would also accept URLs like www.forbidden-site.com/adellecomma.htm

I think you don't want to accept such URLs.

You can use an entry "^http://\w+?\.dell\.com" - this is the new way to define something like *.dell.com.

regards Juergen
Cancel
Vote Up 0 Vote Down

Cancel
0 Microsaft over 18 years ago in reply to JuergenH

I use .*\.dell\.com which should be equal to *.dell.com - and it works...

rgds M$
Cancel
Vote Up 0 Vote Down

Cancel
0 JuergenH over 18 years ago in reply to Microsaft

It works, but I think not correct. You can also use sites like www.heise.de/?www.dell.com or any "bad" site with your entry.

regards Juergen
Cancel
Vote Up 0 Vote Down

Cancel