RE: Re(2): Re(2): Match Protocol Mime or URL?

From: Michael Stout (michaelgstout@hotmail.com)
Date: Fri Sep 08 2006 - 12:13:20 ART


?

  --------------------------------------------------------------------

  From: "Angelo De Guzman" <a.deguzman@wesolv.ph.fujitsu.com>
  To: "James Nendel" <james.nendel@gmail.com>
  CC: "Michael Stout" <michaelgstout@hotmail.com>,
  cvictor@protokolgroup.com, ccielab@groupstudy.com
  Subject: Re(2): Re(2): Match Protocol Mime or URL?
  Date: 7 Sep 2006 15:06:00 +0800

      This is the difficult part. I am not actually good in explaining
  things.
  English is not my first language. Anyway, here goes. MIME is a
  component of a
  communication protocol like http, which requires data to be
  transmitted in the
  context of e-mail-like messages, even though the data may not
  actually be an
  email.

      If you'll take a look at this link. http://www.iana.
  org/assignments/media-types/index.html In this link you'll find the
  different
  MIME-Media types which obviously one of them is image. Which is what
  you want
  to filter right? So I can no longer say more. Read on.

      If you're wondering where did I get the link for the media-type.
  http://www.
  cisco.com/univercd/cc/td/doc/product/software/ios124/124cr/hqos_r/qos_m1h.
  htm#wp1125895

      Anyway did it work?

  James Nendel (9/7/06 2:19 PM):
>
>Explain me in your own words, what is mime used for?
>
>
>On 7 Sep 2006 13:37:00 +0800, Angelo De Guzman
><a.deguzman@wesolv.ph.fujitsu.com> wrote:
>>
>> Try this.
>>
>> match protocol http mime "image/*"
>>
>>
>> Michael Stout (9/7/06 11:27 AM):
>> >
>> >same thing but,
>> >
>> >match protocol http url "*.jpg | *.jpeg"
>> >
>> >if this is a real life problem, you may not be getting the
  traffic
>> >throught http.
>> >It could also be a mime type
>> >
>>
> --------------------------------------------------------------------
>> >
>> > From: "James Nendel" <james.nendel@gmail.com>
>> > To: "Michael Stout" <michaelgstout@hotmail.com>
>> > CC: cvictor@protokolgroup.com, ccielab@groupstudy.com
>> > Subject: Re: Match Protocol Mime or URL?
>> > Date: Wed, 6 Sep 2006 23:21:58 -0400
>> > Same syntax, see Victor's previous post, I tried that and seems
  not
>> > to
>> > be working
>> > Any takers
>> >
>> > On 9/6/06, Michael Stout <michaelgstout@hotmail.com> wrote:
>> > >
>> > >
>> > >
>> > >Im not exactly sure of the question, but i was looking at
  something
>> > >simular
>> > >last night.
>> > >
>> > >Try this syntax
>> > >
>> > >class-map match-any image-type
>> > >match protocol http url "*.jpg"
>> > >match protocol http url "*.jpeg"
>> > >
>> > >!
>> > >policy-map droper
>> > > class image-type
>> > > drop
>> > >
>> > >
>> > >
>> > >
>> > >
>> > > ________________________________
>> > >
>> > >From: "James Nendel" <james.nendel@gmail.com>
>> > >Reply-To: "James Nendel" <james.nendel@gmail.com>
>> > >To: "Victor Cappuccio" <cvictor@protokolgroup.com>
>> > >CC: ccielab@groupstudy.com
>> > >Subject: Re: Match Protocol Mime or URL?
>> > >Date: Wed, 6 Sep 2006 22:27:58 -0400
>> > >
>> > >Victor, I tried your configuration and seems not to be working
>> > >Any other takers?
>> > >
>> > >Thanks
>> > >James
>> > >
>> > >On 9/4/06, Victor Cappuccio <cvictor@protokolgroup.com> wrote:
>> > > >Dude,
>> > > >
>> > > >Does this configuration looks good for you ?
>> > > >
>> > > >Sw1#copy http://151.1.8.8/l.gif null:
>> > > >
>> > > >BB1-TS#1
>> > > >[Resuming connection 1 to R1 ... ]
>> > > >
>> > > >R1#
>> > > >R1#show policy-map int f0/0
>> > > > FastEthernet0/0
>> > > >
>> > > > Service-policy input: IMAGENES_DROP
>> > > >
>> > > > Class-map: CLASE_IMAGENES (match-any)
>> > > > 6 packets, 1363 bytes
>> > > > 5 minute offered rate 0 bps, drop rate 0 bps
>> > > > Match: protocol http url "*.jpeg"
>> > > > 0 packets, 0 bytes
>> > > > 5 minute rate 0 bps
>> > > > Match: protocol http url "*.jpg"
>> > > > 0 packets, 0 bytes
>> > > > 5 minute rate 0 bps
>> > > > Match: protocol http url "*.gif"
>> > > > 6 packets, 1363 bytes <<<<<<<<<<<<<<<<< Have
  Pkts
>> > > >Matched.......
>> > > > 5 minute rate 0 bps
>> > > > drop
>> > > >
>> > > > Class-map: class-default (match-any)
>> > > > 8 packets, 578 bytes
>> > > > 5 minute offered rate 0 bps, drop rate 0 bps
>> > > > Match: any
>> > > >
>> > > >R2#show run int f0/0
>> > > >Building configuration...
>> > > >
>> > > >Current configuration : 243 bytes
>> > > >!
>> > > >interface FastEthernet0/0
>> > > > service-policy input IMAGENES_DROP
>> > > >end
>> > > >
>> > > >R1#
>> > > >
>> > > >topology
>> > > >
>> > > >Sw1 ------ R1 f0/0 ------ WebServer(Sw2)
>> > > >
>> > > >HTH
>> > > >Victor.-
>> > > >
>> > > >-----Mensaje original-----
>> > > >De: nobody@groupstudy.com [mailto:nobody@groupstudy.com] En
  nombre
>> > > >de James
>> > > >Nendel
>> > > >Enviado el: Lunes, 04 de Septiembre de 2006 03:23 p.m.
>> > > >Para: ccielab@groupstudy.com
>> > > >Asunto: Match Protocol Mime or URL?
>> > > >
>> > > >How can I configure Rx to Drop all downloaded files with
>> > >extensions
>> > > >.jpg, ..gif and .jpeg from internet.
>> > > >
>> > > >Thanks
>> > > >James
>> > > >
>> > >
>>
> >_______________________________________________________________________
>> > > >Subscription information may be found at:
>> > > >http://www.groupstudy.com/list/CCIELab.html
>> > >
>>
> >_______________________________________________________________________
>> > >Subscription information may be found at:
>> > >http://www.groupstudy.com/list/CCIELab.html
>> >
>>
>_______________________________________________________________________
>> >Subscription information may be found at:
>> >http://www.groupstudy.com/list/CCIELab.html
>> >
>> >***********************
>> >No virus was detected in the attachment no filename
>> >
>> >Your mail has been scanned by InterScan MSS.
>> >***********-***********
>> >
>>
>>
>>
>> ***********************
>> No virus was detected in the attachment no filename
>>
>> Your mail has been scanned by InterScan MSS.
>> ***********-***********
>>
>>
>
>***********************
>No virus was detected in the attachment no filename
>
>Your mail has been scanned by InterScan MSS.
>***********-***********
>

  ***********************
  No virus was detected in the attachment no filename

  Your mail has been scanned by InterScan MSS.
  ***********-***********



This archive was generated by hypermail 2.1.4 : Sun Oct 01 2006 - 16:55:40 ART