Problem: “I want to block facebook.com and myspace.com but I don’t have a Websense server.”
regex domlist1 "facebook.com" regex domlist2 "myspace.com" ! class-map type regex match-any DomainBlockList match regex domlist1 match regex domlist2 ! class-map type inspect http match-all BlockDomainsClass match request header host regex class DomainBlockList ! policy-map type inspect http http_inspection_policy class BlockDomainsClass reset log ! policy-map global_policy class inspection_default inspect http http_inspection_policy ! service-policy global_policy global wr mem
Better have a lot of spare CPU or low HTTP traffic levels when implementing HTTP inspect with regex or you could wind up in quite the pickle.