freewrt_1_0
freewrt_2_0
| Rev | Line | |
|---|
| [475ad56] | 1 | # HTTP - HyperText Transfer Protocol - RFC 2616
|
|---|
| 2 | # Pattern quality: great notsofast
|
|---|
| 3 | # Usually runs on port 80
|
|---|
| 4 | #
|
|---|
| 5 | # This pattern has been tested and is believed to work well. If it does not
|
|---|
| 6 | # work for you, or you believe it could be improved, please post to
|
|---|
| 7 | # l7-filter-developers@lists.sf.net . This list may be subscribed to at
|
|---|
| 8 | # http://lists.sourceforge.net/lists/listinfo/l7-filter-developers
|
|---|
| 9 | #
|
|---|
| 10 | # this intentionally catches the response from the server
|
|---|
| 11 | # rather than the request so that other protocols which use
|
|---|
| 12 | # http (like kazaa) can be caught based on specific http requests
|
|---|
| 13 | # regardless of the ordering of filters...
|
|---|
| 14 | # also matches posts
|
|---|
| 15 |
|
|---|
| 16 | # Sites that serve really long cookies may break this by pushing the
|
|---|
| 17 | # server response too far away from the beginning of the connection. To
|
|---|
| 18 | # fix this, increase the kernel's data buffer length.
|
|---|
| 19 |
|
|---|
| 20 | http
|
|---|
| 21 | # Status-Line = HTTP-Version SP Status-Code SP Reason-Phrase CRLF (rfc 2616)
|
|---|
| 22 | # As specified in rfc 2616 a status code is preceeded and followed by a
|
|---|
| 23 | # space.
|
|---|
| 24 | http/(0\.9|1\.0|1\.1) [1-5][0-9][0-9] [\x09-\x0d -~]*(connection:|content-type:|content-length:|date:)|post [\x09-\x0d -~]* http/[01]\.[019]
|
|---|
| 25 | # A slightly faster version that might be good enough:
|
|---|
| 26 | #http/(0\.9|1\.0|1\.1) [1-5][0-9][0-9]|post [\x09-\x0d -~]* http/[01]\.[019]
|
|---|
| 27 | # old pattern(s):
|
|---|
| 28 | #(http[\x09-\x0d -~]*(200 ok|302 |304 )[\x09-\x0d -~]*(connection:|content-type:|content-length:))|^(post [\x09-\x0d -~]* http/)
|
|---|
Note:
See
TracBrowser
for help on using the repository browser.
