layer 7 protocol

I have blocked .zip files extensions but when I download from such this URL:http://www.1sa1.net/1sa1/1sa1/1sa1/download/file.php?id=758&sid=ec6a647fe397aaadd6455dd7d5337536

MK could not catch this .zip file. I think there is no “zip” word mention in the URL above?
how I can work around this?

thanks all

What is your L7 Filter regexp?
Try this http://l7-filter.sourceforge.net/protocols maybe useful :slight_smile:

Currently I use this: ^.get.+.zip.$
but also the following failed to catch such mentioned above urls: “^.get.+\.zip.$”

Second when I browse any website had a video clip with ext like .flv, I can not paly this clip because of L7 pro.
How I can differentiate between downloading files and playing file inside the browser?

finally, what about HTTPS Can MK detect me when I am downloading form rapidshare during https?
I tried but my regexp also failed.

FLV: ^.get.+.flv.$

try

pk\x03\x04\x14

from : http://l7-filter.sourceforge.net/layer7-protocols/file_types/zip.pat

but regard separating video downloading and playing directly?

Did the last code work?

You want to allow direct play video and deny download it ? or something else ?

Yes.

Sorry for misunderstanding
Yes for Which one? The code or the quote? :slight_smile:

I want to allow direct play video and deny download it ?
Sorry I have to explain to you which one.