Blue Coat Systems Time Clock Proxy SG Manuale Utente
ProxySG Content Policy Language Guide
140
•
.suffix
—Test if the
string
pattern is a suffix of the URL or component. The suffix need not
match on a boundary (such as a domain component or path directory) within a URL component.
Note:
.prefix
,
.regex
,
.substring
, and
.suffix
are string comparisons that do not require a
match on component boundaries. For this reason,
url.host.suffix=
differs from the host
comparison used in
url.domain=
tests, which does require component level matches.
The URL component modifiers are:
•
.address
—Tests if the host IP address of the requested URL matches the specified IP address, IP
subnet, or subnet definition. If necessary, a DNS lookup is performed on the host name. DNS
lookups can be globally restricted by a
lookups can be globally restricted by a
restrict
DNS definition.
The patterns supported by the url.address= test are:
❐
ip_address
—Host IP address or subnet; for example,
10.1.198.0.
❐
subnet
—A subnet mask; for example,
10.1.198.0/24
.
❐
subnet_label
—Label of a subnet definition block that binds a number of IP addresses or
subnets.
The
.address
modifier is primarily useful when the expression uses either a
subnet
or a
subnet_label
. If a literal
ip_address
is used, then the
url.address=
condition is equivalent to
url.host=
.
•
.host
—Tests the host component of the requested URL against the IP address or domain name
specified by the
host
pattern. The pattern cannot include a forward slash (
/
) or colon (
:
). It does
not recognize wild cards or suffix matching. Matches are case-insensitive. The default test type is
.exact
.
Note:
url.host.exact=
can be tested using hash techniques rather than string matches, and will
therefore have significantly better performance than other, string based, versions of the
url.host=
tests. .
Since the host component of a request URL can be either an IP address or a domain name, a
conversion is sometimes necessary to allow a comparison.
conversion is sometimes necessary to allow a comparison.
❐
If the expression uses a domain name and the host component of the request URL is an IP
address, then the IP address is converted to a domain name by doing a reverse DNS lookup.
address, then the IP address is converted to a domain name by doing a reverse DNS lookup.
❐
If the expression uses an IP address and the host component of the request URL is a domain
name, then the domain name is converted to an IP address by doing a DNS lookup.
name, then the domain name is converted to an IP address by doing a DNS lookup.
The
.host
component supports additional test modifiers:
❐
.is_numeric
—This is true if the URL host was specified as an IP address. For some types of
transactions (for example, transparent requests on a non-accelerated port), this condition will
always be true.
always be true.
❐
.no_name
—This is true if no domain name can be found for the URL host. Specifically, it is
true if the URL host was specified as an IP address, and a reverse DNS lookup on this IP
address fails, either because it returns no name or a network error occurs.
address fails, either because it returns no name or a network error occurs.
•
.path
—Tests the path component of the request URL. By default, the pattern is tested as a prefix
of the complete path component of the requested URL, as well as any query component. The path
and query components of a URL consist of all text from the first forward slash (
and query components of a URL consist of all text from the first forward slash (
/
) that follows the
host or port, to the end of the URL, not including any fragment identifier. The leading forward