How to filter Intranet user Web Access based on regional firewall scheme

Background description

For business executives, working hours are all about wanting employees to work seriously, doing less work-related things, but in fact, for employees, working all day in the office is a need to relax.

As a result, the contradictions arose: managers want employees to be less on the public network, do not want staff to use working hours to chat, watching movies ...

Employees want to chat, watch movies ...

For the Enterprise network engineer, the request neutralization, conforms to the leadership the request, also does not have the colleague revolt, thus is below.

Implementation objectives

1. Filter qq\msn\ Happy net, Thunder potato \ Excellent cool Archie art Taobao \58 with the city \6 room ...

2. Release the rest of the site

3. Set up the violation log record, in case the leader inquires (-_-)

4.DMZ Zone Access Unrestricted

Key commands

Define the filter site, divided into two ways xx.xx\.*xx.xx, pay attention to the final release of all the rest of the site traffic, otherwise the comrades will rebel-_-

Parameter-map type regex uri.regex.cm
Pattern. *sex
Pattern. *game
Pattern. *download
Pattern. *qq

Parameter-map type Urlf-glob QQ
Pattern qq.com
Pattern *.qq.com

Parameter-map Type Urlf-glob MSN
Pattern *.msn.com
Pattern msn.com

Parameter-map type Urlf-glob Taobao
Pattern taobao.com
Pattern *.taobao.com

Parameter-map type Urlf-glob Renren
Pattern *.renren.com
Pattern renren.com

Parameter-map type Urlf-glob kaixin001
Pattern kaixin001.com
Pattern *.kaixin001.com

Parameter-map Type Urlf-glob 58
Pattern *.58.com
Pattern 58.com

Parameter-map type Urlf-glob Xunlei
Pattern xunlei.com
Pattern *.xunlei.com

Parameter-map Type Urlf-glob 6
Pattern *.6.com
Pattern 6.com

Parameter-map type Urlf-glob Tudou
Pattern tudou.com
Pattern *.tudou.com

Parameter-map type Urlf-glob Youku
Pattern *.youku.com
Pattern youku.com

Parameter-map type Urlf-glob Iqiyi
Pattern iqiyi.com
Pattern *.iqiyi.com

Parameter-map type Urlf-glob per.sites
Pattern *