ProxySG Content Policy Language Guide

//host:port

//host:port/path_query //host/path_query host

host:port

host:port/path_query host/path_query /path_query

domain_suffix_pattern—A URL pattern that includes a domain suffix, as a minimum, using the following syntax:

scheme://domain_suffix:port/path

Accepted domain suffix patterns include the following:

scheme://domain_suffix scheme://domain_suffix:port scheme://domain_suffix:port/path_query scheme://domain_suffix/path_query //domain_suffix //domain_suffix:port //domain_suffix:port/path_query //domain_suffix/path_query domain_suffix

domain_suffix:port

domain_suffix:port/path_query domain_suffix/path_query

url_schemeOne of http, https, ftp, mms, rtsp, tcp, aol-im,msn-im, or yahoo-im.

The request URL has the scheme https only in the case of SSL termination. A request URL with the scheme tcp only has a host and a port, and occurs in two cases: when a connection is made to a TCP tunnel service port, and when the CONNECT method is used in an explicitly proxied HTTP request. For example, when the Web browser has an explicit HTTP proxy and the user requests an HTTPS URL, the browser creates a TCP tunnel using the CONNECT method.

hostA domain name or IP address. Host names must be complete; for example, url=http://www fails to match a URL such as http://www.example.com. This use of a complete host instead of a domain_suffix (such as example.com) indicates the difference between the url= and url.domain= conditions.

domain_suffixA pattern which matches either a complete domain name or is a suffix of the domain name, respecting component boundaries. An IP address is not allowed. This use of a domain_suffix pattern instead of a complete host name marks the difference between the url.domain= and url= conditions.

port—A port number, between 1 and 65535.

path_query—The path_query portion of a URL is the string beginning with ‘/’ that follows the host and port, and precedes any URL fragment. A path_query pattern is a string beginning with a ‘/’ that matches the beginning of the path_query.

filename_extension—A string representing a filename extension to be tested, optionally preceded by a period (.). A quoted empty string (url.extension=””) matches URLs that do not

138

Page 138
Image 138
Blue Coat Systems Proxy SG manual Accepted domain suffix patterns include the following