PathCheck rules

Hi,

I'm having some trouble understanding how Proxy Server 4.0.4 uses PathCheck directives. I've added these lines to the default object in obj.conf:

<Object name="default">

PathCheck fn="url-filter" allow="whitelist" bong-file="/var/proxyserver/toobad"

PathCheck fn="url-filter" deny="bl-porn-regex" bong-file="/var/proxyserver/toobad"

I want the flow of control to go like this:

if the url matches the whitelist, then accept it,elsecontinue

if the url matches bl-porn-regex, then reject it

But it seems to work like this:

if the url matches the whitelist, then accept it,else reject it

if the url matches bl-porn-regex, then reject it

Is what I want to do possible with PathCheck? Is this behavior documented somewhere?

TIA,

Tony

[1233 byte] By [brancatoa] at [2007-11-26 22:10:13]
# 1
Well yes, that's the way the url filter pathcheck is implemented. If the URL does notappear in the whitelist, it will be rejected.
motora at 2007-7-10 10:57:34 > top of Java-index,Web & Directory Servers,Web Servers...
# 2

Motor, thanks. So to do what I want, I see two options:

1. Create separate objects for the URL's on my whitelist. The PathCheck url-filter rule can be different for these objects. The default object can use the blacklist I originally specified.

2. Wrlte my own url-filter that works the way I want using NSAPI.

Do I understand the server architecture correctly?

Tony

brancatoa at 2007-7-10 10:57:34 > top of Java-index,Web & Directory Servers,Web Servers...
# 3
Yes, that would work.
motora at 2007-7-10 10:57:34 > top of Java-index,Web & Directory Servers,Web Servers...