Re: ipfilter block an vhost name

On 6/13/23 16:01, ft wrote:
> Hello
> 
> It is possible to block all in and/or out packages from an url
> with no logging
> any ports (or http and https)
> 
> It seem it is a vhost, the ip have more url.
> 
> my example:
> block in  from "brigitte.de" to any
> block out from "brigitte.de" to any
> 
> 
> Franz
> 
> 
At the packet filtering level, all ipfilter has to go on are the
source and destination IP addresses in the packet itself.  So even
if 'block in from "brigitte.de" to any' is syntactically acceptable
in your rule set (I believe it is not), it's still blocking on the
IP address to which the name resolves, not on the name.     -- George