Bluehost.com Web Hosting $6.95

iptables block host name instead of ip address

This is a discussion on iptables block host name instead of ip address within the Linux Networking forums, part of the Linux Forums category; How do i block traffic to a specifick hostname. For example www.hotmail.com host www.hotmail.com www.hotmail....


Go Back   Usenet Forums > Linux Forums > Linux Networking

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-04-2005
-
 
Posts: n/a
Default iptables block host name instead of ip address

How do i block traffic to a specifick hostname.
For example www.hotmail.com

host www.hotmail.com
www.hotmail.com is an alias for www.hotmail.com.nsatc.net.
www.hotmail.com.nsatc.net has address 166.63.208.155
www.hotmail.com.nsatc.net has address 207.68.172.241
www.hotmail.com.nsatc.net has address 208.173.208.152

Now i insert all the seperate ip addresses so trafic to
www.hotmail.com is blocked.

However, when the ip address change, people can go to www.hotmail.com
again, without notice.

Can this be done with iptables or perhaps some other way?

Kind Regards
Reply With Quote
  #2 (permalink)  
Old 02-04-2005
David Schwartz
 
Posts: n/a
Default Re: iptables block host name instead of ip address


"-" <mapsit@hotmail.com> wrote in message
news:8ab0e2d9.0502040143.615d8419@posting.google.c om...
> How do i block traffic to a specifick hostname.
> For example www.hotmail.com
>
> host www.hotmail.com
> www.hotmail.com is an alias for www.hotmail.com.nsatc.net.
> www.hotmail.com.nsatc.net has address 166.63.208.155
> www.hotmail.com.nsatc.net has address 207.68.172.241
> www.hotmail.com.nsatc.net has address 208.173.208.152
>
> Now i insert all the seperate ip addresses so trafic to
> www.hotmail.com is blocked.
>
> However, when the ip address change, people can go to www.hotmail.com
> again, without notice.
>
> Can this be done with iptables or perhaps some other way?


Fundamentally this cannot be done. In principle, an IP filter has no way
of knowing what host name another computer used to establish what IP address
it's connecting to.

It's like trying to program a telephone system to prevent calls to
George Jones, even if his phone number changes or he is at a friend's house.
The phone system has no idea who you are calling, just what number you
dialed.

DS


Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 01:57 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0