On 6/13/23 16:01, ft wrote:
Hello
It is possible to block all in and/or out packages from an url
with no logging
any ports (or http and https)
It seem it is a vhost, the ip have more url.
my example:
block in from "brigitte.de" to any
block out from "brigitte.de" to any
Franz
At the packet filtering level, all ipfilter has to go on are the
source and destination IP addresses in the packet itself. So even
if 'block in from "brigitte.de" to any' is syntactically acceptable
in your rule set (I believe it is not), it's still blocking on the
IP address to which the name resolves, not on the name. -- George