Re: ipfilter block an vhost name

In reply to: ft : "ipfilter block an vhost name"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Holger Kipp <Holger.Kipp_at_alogis.com>
Date: Tue, 13 Jun 2023 20:24:42 UTC

Hi there,

> On 13. Jun 2023, at 22:02, ft <ml@ft-c.de> wrote:
> 
> Hello 
> 
> It is possible to block all in and/or out packages from an url
> with no logging
> any ports (or http and https)

I assume this is a question. 

You can use FQDNs but they will be resolved during startup (if DNS is available), so effectively this will just use the IP address.

> It seem it is a vhost, the ip have more url.
> 
> my example:
> block in  from "brigitte.de" to any
> block out from "brigitte.de" to any

Last line should be 
block out from any to "brigitte.de"

> Franz

If you want to block specific domains and subdomains only, but not full IP addresses, you need to use some mandatory http(s) proxy, though (eg squid).

Best regards
Holger