cnc domain-filter exception domain-name

Function

The cnc domain-filter exception domain-name command adds an exception domain name.

The undo cnc domain-filter exception domain-name command deletes an exception domain name.

Format

cnc domain-filter exception domain-name domain-name

undo cnc domain-filter exception { domain-name domain-name | all }

Parameters

Parameter	Description	Value
domain-name	Specifies a malicious domain name.	The value is a string of 4 to 255 characters.
all	Indicates all malicious domain names.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

These commands are used to add or delete exception domain names. To view all specified exception domain names, run display cnc domain-filter exception.

The exception domain name must be a domain name in the malicious domain name signature database. Adding any domain name that is not in the malicious domain name signature database is pointless. You can determine whether to add a malicious domain name as an exception domain name based on the threat logs. After a malicious domain name is added as an exception domain name, the device does not filter out the packets matching the exception domain name.

Example

# Add www.example.com as an exception domain name.

<sysname> system-view
[sysname] cnc domain-filter exception domain-name www.example.com

# Delete all exception domain names.

[sysname] undo cnc domain-filter exception all