[c-nsp] ACE Regex filtering for url match trouble with %

ben.steele at internode.on.net ben.steele at internode.on.net
Sun Aug 24 22:32:13 EDT 2008


 

	  BODY { font-family:Arial, Helvetica, sans-serif;font-size:12px; }
Hi, 

	Has anyone had any issues with filtering anything with a % sign in
the url when trying to match for url filtering. 

	Example: 

	class-map type http inspect match-any SQL_FILTER
   2 match url .[Ee][Xx][Ee][Cc]@.*
   3 match url .[Ss][Ee][Ll][Ee][Cc][Tt]%20.* 

	The first string will match no problem, but the second one won't,
i've tried all different methods of matching the % sign like 'ing it,
putting it in [] etc. in theory the above should just work with
something like http://www.bla.com/SELECT%20test.html [1] as it does
with EXEC@ but it doesn't, anyone got any ideas or had similar issues,
just want to check here before I raise a TAC. 

	Cheers 

	Ben


Links:
------
[1] http://www.bla.com/SELECT%20test.html


More information about the cisco-nsp mailing list