Click Create to create a row in the table. Click the Enable check box to enable the rule; deselect the check box to disable In the URL field, based on the URL Type you select, enter an optional URL From the URL Type list, select an option to determine how

4-12 Oracle Fusion Middleware Administrators Guide for Oracle Web Cache

4.9 Configuring Rules for the Header Request Filter

The header request filter enables Oracle Web Cache to deny access based on HTTP header values. Rules for the header request filter are most effective for white box lists. See Section 4.2 for further information about the header request filter. To configure rules for the header request filter: 1. Navigate to the Web Cache Home page in Fusion Middleware Control. See Section 2.6.2 .

2. From the Web Cache menu, select Administration and then Request Filters.

The Request Filters Summary page displays.

3. From the Site list, select the site to apply the filter. See

Section 2.11.3 and Section 2.11.4 to create additional sites. You can configure filters and filter rules for specific sites or Undefined Sites. Oracle Web Cache directs client requests that do not match a defined site to the request filters configured for Undefined Sites.

4. Click the Header link.

The Header Request Filter page displays.

5. From the Audit list, select the level of action for Oracle Web Cache to include in

the audit log for the request filter.

6. From the Response to deny list, select the HTTP response for Oracle Web Cache to

return to browsers for requests that are denied by this request filter. The Close Connection option does not return any HTTP responses. It just closes the connection. 7. Create a new rule:

a. Click Create to create a row in the table.

b. In the Header Name field, enter the name of the HTTP request header name,

such as Cookie.

c. In the Value Expression field, enter the expression, as a substring or regular

expression, for the headers value used to compare against an incoming request.

d. From the Type list, select to base the match evaluation on the substring or

regular expression in the Value Expression field. e. Click the Enable check box to enable the rule; deselect the check box to disable the rule temporarily without losing the rule definition.

f. In the URL field, based on the URL Type you select, enter an optional URL

string. If no URLs are specified, then all requests are checked. It is equivalent to specifying a URL with a prefix . - Path Prefix: Enter the path prefix of the objects. Start the path with ; do not start the path with http:host_name:port. The prefix is interpreted literally, including reserved regular expression characters. These characters include periods ., question marks ?, asterisks , brackets [], curly braces {}, carets , dollar signs , and backslashes \. - File Extension: Enter the file extension. Because Oracle Web Cache internally starts the file extension with a period ., it is not necessary to enter it. Configuring Request Filtering 4-13 - Regular Expression: Enter the regular expression of the objects. Remember to use to denote the start of the URL and to denote the end of the URL.

g. From the URL Type list, select an option to determine how the rules URL is

compared to the requests URL: - Path Prefix: Select to allow or deny access to requests matching a path prefix. - File Extension: Select to allow or deny access to requests matching a particular file extension. - Regular Expression: Select to allow or deny access to requests matching regular expression syntax.

h. Click the Case Insensitive Match check box to match requests regardless of