Levi Bard wrote:
>
> What I mean is:
> iptables will allow you to allow/deny a domain, like suncoastlug.org.
> It won't allow you to say, "suncoastlug.org/index.html" is ok, but
> "suncoastlug.org/naughty.html" is bad. Which I believe squid will.
> Also, if something is multihosted...for example, if
> educationalstuff.org is hosted on the same server with the same ip as
> ninetynaughtynurses.net, iptables won't see the difference.
Ah. Thank you muchly for clarifying that. Does this mean that I can
actually configure iptables to control access to domains by name so that
a domain hosted on, for instance, a DynDNS resolver will work properly?
I imagine that having to specify by IP address would actually cause
anything using a dynamic IP address to break the functionality of the
iptables.
-- Chad Perrin @political [apotheon.com] for the lazy middle-class intellectual a:c [apotheon.net] broken home apocryphagia [apotheon.org] watch what you eat----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 18:37:51 EDT