From ipfilter  Fri Dec 06 05:02:56 2002
From: "Small, Jim" <jim.small () eds ! com>
Date: Fri, 06 Dec 2002 05:02:56 +0000
To: ipfilter
Subject: Filter question
X-MARC-Message: https://marc.info/?l=ipfilter&m=103915149015718

Is it possible to filter on domain names instead of/in addition to IPs?
block out log quick on <IF> proto tcp from any to pornography.com

I would like to mention that I *know* it would be slow.  But let's say I'm
stubborn and want to do it anyway!  How would I setup such a configuration?

I know you could setup a "black-list" file and convert all the names into
IPs.  However, there are problems with this approach.  I also realize you
could do this with transparent proxying and squid, but for various reasons I
do not want to use squid.

What I'm really hoping is that there is some way you could enable this
"feature" directly from ipfilter.

Any comments/suggestions would be greatly appreciated.

Thanks,
   <> Jim