防火墙请问如何通过WEB配置邮件过滤
- 0关注
- 0收藏，38浏览
问题描述：
防火墙彩页显示支持邮件过滤，请问如何通过WEB配置邮件过滤？比如邮件标题过滤，内容过滤等
组网及组网描述：
AVG.163.com/TOPIC/DETAIL/9216352
AVG.163.com/TOPIC/DETAIL/9216361
AVG.163.com/TOPIC/DETAIL/9216391
AVG.163.com/TOPIC/DETAIL/9216405
AVG.163.com/TOPIC/DETAIL/9216412
AVG.163.com/TOPIC/DETAIL/9216491
AVG.163.com/TOPIC/DETAIL/9216500
AVG.163.com/TOPIC/DETAIL/9217056
AVG.163.com/TOPIC/DETAIL/9217247
AVG.163.com/TOPIC/DETAIL/9217415
AVG.163.com/TOPIC/DETAIL/9216492
AVG.163.com/TOPIC/DETAIL/9216502
AVG.163.com/TOPIC/DETAIL/9216507
AVG.163.com/TOPIC/DETAIL/9216543
AVG.163.com/TOPIC/DETAIL/9216716
AVG.163.com/TOPIC/DETAIL/9217082
AVG.163.com/TOPIC/DETAIL/9217416
AVG.163.com/TOPIC/DETAIL/9217721
AVG.163.com/TOPIC/DETAIL/9217816
AVG.163.com/TOPIC/DETAIL/9217913
AVG.163.com/TOPIC/DETAIL/9217991
AVG.163.com/TOPIC/DETAIL/9217593
AVG.163.com/TOPIC/DETAIL/9217610
AVG.163.com/TOPIC/DETAIL/9217703
AVG.163.com/TOPIC/DETAIL/9217813
AVG.163.com/TOPIC/DETAIL/9217810
AVG.163.com/TOPIC/DETAIL/9217906
AVG.163.com/TOPIC/DETAIL/9217907
AVG.163.com/TOPIC/DETAIL/9217996
AVG.163.com/TOPIC/DETAIL/9217992
AVG.163.com/TOPIC/DETAIL/9217595
AVG.163.com/TOPIC/DETAIL/9217698
AVG.163.com/TOPIC/DETAIL/9217807
AVG.163.com/TOPIC/DETAIL/9217596
AVG.163.com/TOPIC/DETAIL/9217917
AVG.163.com/TOPIC/DETAIL/9217697
AVG.163.com/TOPIC/DETAIL/9217994
AVG.163.com/TOPIC/DETAIL/9217822
AVG.163.com/TOPIC/DETAIL/9217904
AVG.163.com/TOPIC/DETAIL/9218002
AVG.163.com/TOPIC/DETAIL/9217611
AVG.163.com/TOPIC/DETAIL/9217691
AVG.163.com/TOPIC/DETAIL/9217901
AVG.163.com/TOPIC/DETAIL/9217606
AVG.163.com/TOPIC/DETAIL/9217693
AVG.163.com/TOPIC/DETAIL/9217802
AVG.163.com/TOPIC/DETAIL/9217902
AVG.163.com/TOPIC/DETAIL/9217998
AVG.163.com/TOPIC/DETAIL/9217716
AVG.163.com/TOPIC/DETAIL/9217605
AVG.163.com/TOPIC/DETAIL/9217821
AVG.163.com/TOPIC/DETAIL/9217800
AVG.163.com/TOPIC/DETAIL/9217916
AVG.163.com/TOPIC/DETAIL/9217912
AVG.163.com/TOPIC/DETAIL/9217586
AVG.163.com/TOPIC/DETAIL/9217715
AVG.163.com/TOPIC/DETAIL/9217598
AVG.163.com/TOPIC/DETAIL/9217820
AVG.163.com/TOPIC/DETAIL/9217685
AVG.163.com/TOPIC/DETAIL/9217890
AVG.163.com/TOPIC/DETAIL/9217603
AVG.163.com/TOPIC/DETAIL/9217989
AVG.163.com/TOPIC/DETAIL/9217687
AVG.163.com/TOPIC/DETAIL/9217817
AVG.163.com/TOPIC/DETAIL/9217797
AVG.163.com/TOPIC/DETAIL/9217888
AVG.163.com/TOPIC/DETAIL/9217915
AVG.163.com/TOPIC/DETAIL/9217978
AVG.163.com/TOPIC/DETAIL/9217987
AVG.163.com/TOPIC/DETAIL/9217572
AVG.163.com/TOPIC/DETAIL/9217891
AVG.163.com/TOPIC/DETAIL/9217995
AVG.163.com/TOPIC/DETAIL/9217599
AVG.163.com/TOPIC/DETAIL/9217684
AVG.163.com/TOPIC/DETAIL/9217792
AVG.163.com/TOPIC/DETAIL/9217569
AVG.163.com/TOPIC/DETAIL/9217984
AVG.163.com/TOPIC/DETAIL/9217722
AVG.163.com/TOPIC/DETAIL/9217795
AVG.163.com/TOPIC/DETAIL/9217889
AVG.163.com/TOPIC/DETAIL/9217977
AVG.163.com/TOPIC/DETAIL/9217602
AVG.163.com/TOPIC/DETAIL/9217682
AVG.163.com/TOPIC/DETAIL/9217793
AVG.163.com/TOPIC/DETAIL/9217683
AVG.163.com/TOPIC/DETAIL/9217815
AVG.163.com/TOPIC/DETAIL/9217908
AVG.163.com/TOPIC/DETAIL/9218001
AVG.163.com/TOPIC/DETAIL/9217568
AVG.163.com/TOPIC/DETAIL/9217679
AVG.163.com/TOPIC/DETAIL/9217805
AVG.163.com/TOPIC/DETAIL/9217885
AVG.163.com/TOPIC/DETAIL/9217570
AVG.163.com/TOPIC/DETAIL/9217676
AVG.163.com/TOPIC/DETAIL/9217567
AVG.163.com/TOPIC/DETAIL/9217786
AVG.163.com/TOPIC/DETAIL/9217677
AVG.163.com/TOPIC/DETAIL/9217881
AVG.163.com/TOPIC/DETAIL/9217789
AVG.163.com/TOPIC/DETAIL/9217919
AVG.163.com/TOPIC/DETAIL/9217609
AVG.163.com/TOPIC/DETAIL/9217673
AVG.163.com/TOPIC/DETAIL/9217785
AVG.163.com/TOPIC/DETAIL/9217565
AVG.163.com/TOPIC/DETAIL/9217883
AVG.163.com/TOPIC/DETAIL/9217675
AVG.163.com/TOPIC/DETAIL/9217973
AVG.163.com/TOPIC/DETAIL/9217801
AVG.163.com/TOPIC/DETAIL/9217559
AVG.163.com/TOPIC/DETAIL/9217884
AVG.163.com/TOPIC/DETAIL/9217689
AVG.163.com/TOPIC/DETAIL/9217986
AVG.163.com/TOPIC/DETAIL/9217799
AVG.163.com/TOPIC/DETAIL/9217897
AVG.163.com/TOPIC/DETAIL/9217971
AVG.163.com/TOPIC/DETAIL/9217558
AVG.163.com/TOPIC/DETAIL/9217717
AVG.163.com/TOPIC/DETAIL/9217784
AVG.163.com/TOPIC/DETAIL/9217879
AVG.163.com/TOPIC/DETAIL/9217972
AVG.163.com/TOPIC/DETAIL/9217590
AVG.163.com/TOPIC/DETAIL/9217718
AVG.163.com/TOPIC/DETAIL/9217780
AVG.163.com/TOPIC/DETAIL/9217969
AVG.163.com/TOPIC/DETAIL/9217600
AVG.163.com/TOPIC/DETAIL/9217670
AVG.163.com/TOPIC/DETAIL/9217778
AVG.163.com/TOPIC/DETAIL/9217877
AVG.163.com/TOPIC/DETAIL/9217993
AVG.163.com/TOPIC/DETAIL/9217601
AVG.163.com/TOPIC/DETAIL/9217720
AVG.163.com/TOPIC/DETAIL/9217782
AVG.163.com/TOPIC/DETAIL/9217911
AVG.163.com/TOPIC/DETAIL/9217571
AVG.163.com/TOPIC/DETAIL/9217668
AVG.163.com/TOPIC/DETAIL/9217922
AVG.163.com/TOPIC/DETAIL/9217970
AVG.163.com/TOPIC/DETAIL/9217557
AVG.163.com/TOPIC/DETAIL/9217549
AVG.163.com/TOPIC/DETAIL/9217667
AVG.163.com/TOPIC/DETAIL/9217666
AVG.163.com/TOPIC/DETAIL/9217909
AVG.163.com/TOPIC/DETAIL/9217818
AVG.163.com/TOPIC/DETAIL/9217880
AVG.163.com/TOPIC/DETAIL/9218000
AVG.163.com/TOPIC/DETAIL/9217555
AVG.163.com/TOPIC/DETAIL/9217681
AVG.163.com/TOPIC/DETAIL/9217774
AVG.163.com/TOPIC/DETAIL/9217964
AVG.163.com/TOPIC/DETAIL/9217548
AVG.163.com/TOPIC/DETAIL/9217665
AVG.163.com/TOPIC/DETAIL/9217775
AVG.163.com/TOPIC/DETAIL/9217604
AVG.163.com/TOPIC/DETAIL/9217873
AVG.163.com/TOPIC/DETAIL/9217661
AVG.163.com/TOPIC/DETAIL/9217963
AVG.163.com/TOPIC/DETAIL/9217772
AVG.163.com/TOPIC/DETAIL/9217869
AVG.163.com/TOPIC/DETAIL/9217962
AVG.163.com/TOPIC/DETAIL/9217591
AVG.163.com/TOPIC/DETAIL/9217663
AVG.163.com/TOPIC/DETAIL/9217771
AVG.163.com/TOPIC/DETAIL/9217870
AVG.163.com/TOPIC/DETAIL/9217966
AVG.163.com/TOPIC/DETAIL/9217544
AVG.163.com/TOPIC/DETAIL/9217659
AVG.163.com/TOPIC/DETAIL/9217824
AVG.163.com/TOPIC/DETAIL/9217872
AVG.163.com/TOPIC/DETAIL/9217547
AVG.163.com/TOPIC/DETAIL/9217560
AVG.163.com/TOPIC/DETAIL/9217662
AVG.163.com/TOPIC/DETAIL/9217674
AVG.163.com/TOPIC/DETAIL/9217787
AVG.163.com/TOPIC/DETAIL/9217770
AVG.163.com/TOPIC/DETAIL/9217867
AVG.163.com/TOPIC/DETAIL/9217960
AVG.163.com/TOPIC/DETAIL/9217543
AVG.163.com/TOPIC/DETAIL/9217658
AVG.163.com/TOPIC/DETAIL/9217541
AVG.163.com/TOPIC/DETAIL/9217766
AVG.163.com/TOPIC/DETAIL/9217714
AVG.163.com/TOPIC/DETAIL/9217887
AVG.163.com/TOPIC/DETAIL/9217781
AVG.163.com/TOPIC/DETAIL/9217974
AVG.163.com/TOPIC/DETAIL/9217542
AVG.163.com/TOPIC/DETAIL/9217866
AVG.163.com/TOPIC/DETAIL/9217713
AVG.163.com/TOPIC/DETAIL/9217965
AVG.163.com/TOPIC/DETAIL/9217764
AVG.163.com/TOPIC/DETAIL/9217556
AVG.163.com/TOPIC/DETAIL/9217864
AVG.163.com/TOPIC/DETAIL/9217669
AVG.163.com/TOPIC/DETAIL/9217957
AVG.163.com/TOPIC/DETAIL/9217767
AVG.163.com/TOPIC/DETAIL/9217894
AVG.163.com/TOPIC/DETAIL/9217959
AVG.163.com/TOPIC/DETAIL/9217562
AVG.163.com/TOPIC/DETAIL/9217652
AVG.163.com/TOPIC/DETAIL/9217819
AVG.163.com/TOPIC/DETAIL/9217863
AVG.163.com/TOPIC/DETAIL/9217967
AVG.163.com/TOPIC/DETAIL/9217540
AVG.163.com/TOPIC/DETAIL/9217539
AVG.163.com/TOPIC/DETAIL/9217651
AVG.163.com/TOPIC/DETAIL/9217654
AVG.163.com/TOPIC/DETAIL/9217763
AVG.163.com/TOPIC/DETAIL/9217760
AVG.163.com/TOPIC/DETAIL/9217874
AVG.163.com/TOPIC/DETAIL/9218003
AVG.163.com/TOPIC/DETAIL/9217536
AVG.163.com/TOPIC/DETAIL/9217650
AVG.163.com/TOPIC/DETAIL/9217852
AVG.163.com/TOPIC/DETAIL/9217859
AVG.163.com/TOPIC/DETAIL/9217953
AVG.163.com/TOPIC/DETAIL/9217534
AVG.163.com/TOPIC/DETAIL/9217537
AVG.163.com/TOPIC/DETAIL/9217648
AVG.163.com/TOPIC/DETAIL/9217649
AVG.163.com/TOPIC/DETAIL/9217759
AVG.163.com/TOPIC/DETAIL/9217761
AVG.163.com/TOPIC/DETAIL/9217861
AVG.163.com/TOPIC/DETAIL/9217860
AVG.163.com/TOPIC/DETAIL/9217952
AVG.163.com/TOPIC/DETAIL/9217530
AVG.163.com/TOPIC/DETAIL/9217645
AVG.163.com/TOPIC/DETAIL/9217882
AVG.163.com/TOPIC/DETAIL/9217954
AVG.163.com/TOPIC/DETAIL/9217597
AVG.163.com/TOPIC/DETAIL/9217647
AVG.163.com/TOPIC/DETAIL/9217857
AVG.163.com/TOPIC/DETAIL/9217951
AVG.163.com/TOPIC/DETAIL/9217524
AVG.163.com/TOPIC/DETAIL/9217680
AVG.163.com/TOPIC/DETAIL/9217757
AVG.163.com/TOPIC/DETAIL/9217868
AVG.163.com/TOPIC/DETAIL/9217949
AVG.163.com/TOPIC/DETAIL/9217528
AVG.163.com/TOPIC/DETAIL/9217644
AVG.163.com/TOPIC/DETAIL/9217758
AVG.163.com/TOPIC/DETAIL/9217947
AVG.163.com/TOPIC/DETAIL/9217525
AVG.163.com/TOPIC/DETAIL/9217642
AVG.163.com/TOPIC/DETAIL/9217756
AVG.163.com/TOPIC/DETAIL/9217854
AVG.163.com/TOPIC/DETAIL/9217950
AVG.163.com/TOPIC/DETAIL/9217577
AVG.163.com/TOPIC/DETAIL/9217640
AVG.163.com/TOPIC/DETAIL/9217768
AVG.163.com/TOPIC/DETAIL/9217878
AVG.163.com/TOPIC/DETAIL/9217554
AVG.163.com/TOPIC/DETAIL/9217942
AVG.163.com/TOPIC/DETAIL/9217532
AVG.163.com/TOPIC/DETAIL/9217672
AVG.163.com/TOPIC/DETAIL/9217653
AVG.163.com/TOPIC/DETAIL/9217762
AVG.163.com/TOPIC/DETAIL/9217769
AVG.163.com/TOPIC/DETAIL/9217946
AVG.163.com/TOPIC/DETAIL/9217538
AVG.163.com/TOPIC/DETAIL/9217639
AVG.163.com/TOPIC/DETAIL/9217754
AVG.163.com/TOPIC/DETAIL/9217910
AVG.163.com/TOPIC/DETAIL/9217997
AVG.163.com/TOPIC/DETAIL/9217551
AVG.163.com/TOPIC/DETAIL/9217634
AVG.163.com/TOPIC/DETAIL/9217748
AVG.163.com/TOPIC/DETAIL/9217514
AVG.163.com/TOPIC/DETAIL/9217921
AVG.163.com/TOPIC/DETAIL/9217637
AVG.163.com/TOPIC/DETAIL/9217940
AVG.163.com/TOPIC/DETAIL/9217752
AVG.163.com/TOPIC/DETAIL/9217856
AVG.163.com/TOPIC/DETAIL/9217958
AVG.163.com/TOPIC/DETAIL/9217515
AVG.163.com/TOPIC/DETAIL/9217641
AVG.163.com/TOPIC/DETAIL/9217741
AVG.163.com/TOPIC/DETAIL/9217845
AVG.163.com/TOPIC/DETAIL/9217936
AVG.163.com/TOPIC/DETAIL/9217513
AVG.163.com/TOPIC/DETAIL/9217629
AVG.163.com/TOPIC/DETAIL/9217746
AVG.163.com/TOPIC/DETAIL/9217858
AVG.163.com/TOPIC/DETAIL/9217521
AVG.163.com/TOPIC/DETAIL/9217938
AVG.163.com/TOPIC/DETAIL/9217638
AVG.163.com/TOPIC/DETAIL/9217751
AVG.163.com/TOPIC/DETAIL/9217935
AVG.163.com/TOPIC/DETAIL/9217517
AVG.163.com/TOPIC/DETAIL/9217628
AVG.163.com/TOPIC/DETAIL/9217745
AVG.163.com/TOPIC/DETAIL/9217847
AVG.163.com/TOPIC/DETAIL/9217934
AVG.163.com/TOPIC/DETAIL/9217507
AVG.163.com/TOPIC/DETAIL/9217625
AVG.163.com/TOPIC/DETAIL/9217505
AVG.163.com/TOPIC/DETAIL/9217738
AVG.163.com/TOPIC/DETAIL/9217660
AVG.163.com/TOPIC/DETAIL/9217842
AVG.163.com/TOPIC/DETAIL/9217734
AVG.163.com/TOPIC/DETAIL/9217932
AVG.163.com/TOPIC/DETAIL/9217841
AVG.163.com/TOPIC/DETAIL/9217930
AVG.163.com/TOPIC/DETAIL/9217511
AVG.163.com/TOPIC/DETAIL/9217622
AVG.163.com/TOPIC/DETAIL/9217732
AVG.163.com/TOPIC/DETAIL/9217933
AVG.163.com/TOPIC/DETAIL/9217503
AVG.163.com/TOPIC/DETAIL/9217701
AVG.163.com/TOPIC/DETAIL/9217736
AVG.163.com/TOPIC/DETAIL/9217837
AVG.163.com/TOPIC/DETAIL/9217929
AVG.163.com/TOPIC/DETAIL/9217620
AVG.163.com/TOPIC/DETAIL/9217730
AVG.163.com/TOPIC/DETAIL/9217927
AVG.163.com/TOPIC/DETAIL/9217522
AVG.163.com/TOPIC/DETAIL/9217643
AVG.163.com/TOPIC/DETAIL/9217755
AVG.163.com/TOPIC/DETAIL/9217948
AVG.163.com/TOPIC/DETAIL/9217504
AVG.163.com/TOPIC/DETAIL/9217621
AVG.163.com/TOPIC/DETAIL/9217750
AVG.163.com/TOPIC/DETAIL/9217833
AVG.163.com/TOPIC/DETAIL/9217975
AVG.163.com/TOPIC/DETAIL/9217500
AVG.163.com/TOPIC/DETAIL/9217619
AVG.163.com/TOPIC/DETAIL/9217749
AVG.163.com/TOPIC/DETAIL/9217844
AVG.163.com/TOPIC/DETAIL/9217502
AVG.163.com/TOPIC/DETAIL/9217615
AVG.163.com/TOPIC/DETAIL/9217497
AVG.163.com/TOPIC/DETAIL/9217729
AVG.163.com/TOPIC/DETAIL/9217656
AVG.163.com/TOPIC/DETAIL/9217865
AVG.163.com/TOPIC/DETAIL/9217765
AVG.163.com/TOPIC/DETAIL/9217832
AVG.163.com/TOPIC/DETAIL/9217498
AVG.163.com/TOPIC/DETAIL/9217777
AVG.163.com/TOPIC/DETAIL/9217850
AVG.163.com/TOPIC/DETAIL/9217646
AVG.163.com/TOPIC/DETAIL/9217783
AVG.163.com/TOPIC/DETAIL/9217876
AVG.163.com/TOPIC/DETAIL/9217501
AVG.163.com/TOPIC/DETAIL/9217796
AVG.163.com/TOPIC/DETAIL/9217900
AVG.163.com/TOPIC/DETAIL/9217496
AVG.163.com/TOPIC/DETAIL/9217968
AVG.163.com/TOPIC/DETAIL/9217531
AVG.163.com/TOPIC/DETAIL/9217753
AVG.163.com/TOPIC/DETAIL/9217533
AVG.163.com/TOPIC/DETAIL/9217776
AVG.163.com/TOPIC/DETAIL/9217550
AVG.163.com/TOPIC/DETAIL/9217791
AVG.163.com/TOPIC/DETAIL/9217564
AVG.163.com/TOPIC/DETAIL/9217849
AVG.163.com/TOPIC/DETAIL/9217956
AVG.163.com/TOPIC/DETAIL/9217566
AVG.163.com/TOPIC/DETAIL/9217875
AVG.163.com/TOPIC/DETAIL/9217588
AVG.163.com/TOPIC/DETAIL/9217710
AVG.163.com/TOPIC/DETAIL/9217587
AVG.163.com/TOPIC/DETAIL/9217546
AVG.163.com/TOPIC/DETAIL/9217563
AVG.163.com/TOPIC/DETAIL/9217584
AVG.163.com/TOPIC/DETAIL/9217711
AVG.163.com/TOPIC/DETAIL/9217494
AVG.163.com/TOPIC/DETAIL/9217655
AVG.163.com/TOPIC/DETAIL/9217862
AVG.163.com/TOPIC/DETAIL/9217512
AVG.163.com/TOPIC/DETAIL/9217712
AVG.163.com/TOPIC/DETAIL/9217583
AVG.163.com/TOPIC/DETAIL/9217671
AVG.163.com/TOPIC/DETAIL/9217579
AVG.163.com/TOPIC/DETAIL/9217707
AVG.163.com/TOPIC/DETAIL/9217582
AVG.163.com/TOPIC/DETAIL/9217708
AVG.163.com/TOPIC/DETAIL/9217580
AVG.163.com/TOPIC/DETAIL/9217705
AVG.163.com/TOPIC/DETAIL/9217585
AVG.163.com/TOPIC/DETAIL/9217709
AVG.163.com/TOPIC/DETAIL/9217552
AVG.163.com/TOPIC/DETAIL/9217617
AVG.163.com/TOPIC/DETAIL/9217726
AVG.163.com/TOPIC/DETAIL/9217834
AVG.163.com/TOPIC/DETAIL/9217924
AVG.163.com/TOPIC/DETAIL/9217495
AVG.163.com/TOPIC/DETAIL/9217616
AVG.163.com/TOPIC/DETAIL/9217727
AVG.163.com/TOPIC/DETAIL/9217830
AVG.163.com/TOPIC/DETAIL/9217499
AVG.163.com/TOPIC/DETAIL/9217614
AVG.163.com/TOPIC/DETAIL/9217728
AVG.163.com/TOPIC/DETAIL/9217829
AVG.163.com/TOPIC/DETAIL/9217624
AVG.163.com/TOPIC/DETAIL/9217535
AVG.163.com/TOPIC/DETAIL/9217725
AVG.163.com/TOPIC/DETAIL/9217613
AVG.163.com/TOPIC/DETAIL/9217923
AVG.163.com/TOPIC/DETAIL/9217794
AVG.163.com/TOPIC/DETAIL/9217828
AVG.163.com/TOPIC/DETAIL/9217626
AVG.163.com/TOPIC/DETAIL/9217926
AVG.163.com/TOPIC/DETAIL/9217724
AVG.163.com/TOPIC/DETAIL/9217831
一、组网需求
用一台防火墙连接两台PC，PC1模拟局域网（内网）用户，PC2模拟Internet（外网）上的Server。在PC2上开启Web和邮件服务，使PC1可以访问Web服务器上的网页和发送邮件。
二、网络拓扑
三、配置步骤
//定义ASPF策略1，并进入该ASPF策略视图
[SecPath1000F]aspf-policy 1
[SecPath1000F-aspf-policy-1]detect http //配置检测http协议
[SecPath1000F-aspf-policy-1]detect smtp //配置检测smtp协议
[SecPath1000F-aspf-policy-1]detect tcp //配置检测tcp协议
[SecPath1000F-aspf-policy-1]quit
[SecPath1000F]acl number 2001
//配置需要进行NAT转换的IP地址范围
[SecPath1000F-acl-basic-2001]rule permit source 172.16.0.0 0.0.0.255
[SecPath1000F]interface GigabitEthernet 0/0 //进入连接PC的接口视图
[SecPath1000F-GigabitEthernet0/0]ip address 172.16.0.1 24
[SecPath1000F-GigabitEthernet0/0]quit
[SecPath1000F]interface GigabitEthernet 0/1 //进入连接Server的接口视图
[SecPath1000F-GigabitEthernet0/1]ip address 192.168.100.1 24
//对接口的出方向的报文应用ASPF策略1
[SecPath1000F-GigabitEthernet0/1]firewall aspf 1 outbound
//直接使用该接口的IP地址作为NAT转换后的IP地址，对匹配标准访问控制列表2001的//数据报文的源IP地址进行NAT转换
[SecPath1000F-GigabitEthernet0/1]nat outbound 2001 [SecPath1000F-GigabitEthernet0/1]quit
//设置防火墙缺省过滤规则为允许
[SecPath1000F]firewall packet-filter default permit
[SecPath1000F]firewall zone trust
[SecPath1000F-zone-trust]add interface GigabitEthernet 0/0
[SecPath1000F]firewall zone untrust
[SecPath1000F-zone-untrust]add interface GigabitEthernet 0/1
[SecPath1000F]firewall url-filter host enable //使能Web地址过滤功能
//添加拒绝访问***.***的过滤条目
[SecPath1000F]firewall url-filter host add deny ***.***
[SecPath1000F]firewall webdata-filter enable //使能Web内容过滤功能
//添加拒绝访问含有以hello开头的字符串的网页的过滤条目
[SecPath1000F]firewall webdata-filter add ^hello
[SecPath1000F]firewall smtp-filter rcptto enable //使能邮件地址过滤功能
[SecPath1000F]firewall smtp-filter rcptto add deny *@***.***
//添加拒绝收件人地址为***.***域中的所有地址“*@***.***”的过滤条目
[SecPath1000F]firewall smtp-filter subject enable //使能邮件主题过滤功能
//添加邮件主题中含有字符串lover的过滤条目
[SecPath1000F]firewall smtp-filter subject add lover
[SecPath1000F]firewall smtp-filter content enable //使能邮件内容过滤功能
//添加拒绝邮件中含有字符串virus的过滤条目
[SecPath1000F]firewall smtp-filter content add virus
[SecPath1000F]firewall smtp-filter attach enable //使能邮件附件过滤功能
//添加附件文件扩展名为exe的过滤条目
[SecPath1000F]firewall smtp-filter attach add *.exe
四、配置要点
1，配置aspf策略，使能检测http、smtp和tcp；
2，使能URL过滤、使能SMTP过滤；
3，设置过滤内容。
五、验证结果
1．PC1无法访问Server上Url地址为***.***的网页，在防火墙上显示Url地址过滤条目被匹配的次数如下所示：
[SecPath1000F]display firewall url-filter host item-all
SN Match-Times Keywords
----------------------------------------------------
1 1 <deny>***.***
2．PC1无法访问Server上网页内容中含有以hello开头的字符串的网页，在防火墙上显示网页内容过滤条目被匹配的次数如下所示：
[SecPath1000F]display firewall webdata-filter item-all
SN Match-Times Keywords
----------------------------------------------------
1 1 ^hello
3．PC1无法发送邮件收件人地址域后缀为@***.***的邮件，在防火墙上显示邮件收件人地址过滤条目被匹配的次数如下所示：
[SecPath1000F]display firewall smtp-filter rcptto item-all
SN Match-Times Keywords
----------------------------------------------------
1 1 <deny>*@***.***
4．PC1无法发送邮件主题中含有字符串lover的邮件，在防火墙上显示邮件主题过滤条目被匹配的次数如下所示：
[SecPath1000F]display firewall smtp-filter subject item-all
SN Match-Times Keywords
----------------------------------------------------
1 1 lover
5．PC1无法发送邮件内容中含有字符串virus的邮件，在防火墙上显示邮件内容过滤条目被匹配的次数如下所示：
[SecPath1000F]display firewall smtp-filter content item-all
SN Match-Times Keywords
----------------------------------------------------
1 1 virus
6．PC1无法发送邮件内容中含有字符串virus的邮件，在防火墙上显示邮件附件文件名过滤条目被匹配的次数如下所示：
[Firewall]display firewall smtp-filter attach item-all
SN Match-Times Keywords
----------------------------------------------------
1 1 *.exe
暂无评论
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论