Re: Iptables vhost
> Is it posebole with iptables to filter on a DNS name not a ip address?
> What i have is an x hosts / domain names and 1 ipadres.
> Lets take an example.
> Host IP address
> Host.example1.com 192.168.1.2
> Host.example2.com 192.168.1.2
> And what i want to do is a packet that is for DNS name Host.example1.com
> go to rule 1 and Host.example2.com is to go to rule 2.
> I hope it's clear becource my english is not that good.
Generally, no because IPTables is a packet filtering firewall. To block
actual host names you need a proxy firewall like Squid. Squid is actually
really good for a business, because if you set up Squid right as a
transparent proxy you can stop people from visiting sites that they
shouldn't during work hours eg. porn.