Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #4037 > unrolled thread
| Started by | Harold Johanssen <noemail@please.net> |
|---|---|
| First post | 2017-04-02 17:09 +0000 |
| Last post | 2017-04-04 16:45 +0000 |
| Articles | 4 — 4 participants |
Back to article view | Back to comp.os.linux.networking
Blocking specific top level domains Harold Johanssen <noemail@please.net> - 2017-04-02 17:09 +0000
Re: Blocking specific top level domains "Jonathan N. Little" <lws4art@gmail.com> - 2017-04-02 16:31 -0400
Re: Blocking specific top level domains Jorgen Grahn <grahn+nntp@snipabacken.se> - 2017-04-03 07:51 +0000
Re: Blocking specific top level domains Jamma Tino Schwarze <jamma-usenet@tisc.de> - 2017-04-04 16:45 +0000
| From | Harold Johanssen <noemail@please.net> |
|---|---|
| Date | 2017-04-02 17:09 +0000 |
| Subject | Blocking specific top level domains |
| Message-ID | <obrb7u$tej$1@news.albasani.net> |
I would like to block some top level domains (.biz and .info, for the most part) in my Linux box. I am talking about a complete blockade - network packets to and from hosts in those domains are to be dropped silently. Leaving aside whether this is a good idea, is it at all possible?
[toc] | [next] | [standalone]
| From | "Jonathan N. Little" <lws4art@gmail.com> |
|---|---|
| Date | 2017-04-02 16:31 -0400 |
| Message-ID | <obrmu0$1us$1@dont-email.me> |
| In reply to | #4037 |
Harold Johanssen wrote: > I would like to block some top level domains (.biz and .info, for > the most part) in my Linux box. I am talking about a complete blockade - > network packets to and from hosts in those domains are to be dropped > silently. Leaving aside whether this is a good idea, is it at all > possible? > Maybe something like privoxy is what you are looking for? sudo apt-get install privoxy -- Take care, Jonathan ------------------- LITTLE WORKS STUDIO http://www.LittleWorksStudio.com
[toc] | [prev] | [next] | [standalone]
| From | Jorgen Grahn <grahn+nntp@snipabacken.se> |
|---|---|
| Date | 2017-04-03 07:51 +0000 |
| Message-ID | <slrnoe3vnp.1jqn.grahn+nntp@frailea.sa.invalid> |
| In reply to | #4040 |
On Sun, 2017-04-02, Jonathan N. Little wrote: > Harold Johanssen wrote: >> I would like to block some top level domains (.biz and .info, for >> the most part) in my Linux box. I am talking about a complete blockade - >> network packets to and from hosts in those domains are to be dropped >> silently. Leaving aside whether this is a good idea, is it at all >> possible? >> > > Maybe something like privoxy is what you are looking for? > > sudo apt-get install privoxy That would only block HTTP traffic to hosts in those domains, and only for users who configure their browsers to use that proxy. Maybe what he needs, but not the "complete blockade" he asks for. /Jorgen -- // Jorgen Grahn <grahn@ Oo o. . . \X/ snipabacken.se> O o .
[toc] | [prev] | [next] | [standalone]
| From | Jamma Tino Schwarze <jamma-usenet@tisc.de> |
|---|---|
| Date | 2017-04-04 16:45 +0000 |
| Message-ID | <oc0iiv$g2t$1@mail.in-chemnitz.de> |
| In reply to | #4037 |
Harold Johanssen <noemail@please.net> wrote: > I would like to block some top level domains (.biz and .info, for > the most part) in my Linux box. I am talking about a complete blockade - > network packets to and from hosts in those domains are to be dropped > silently. Leaving aside whether this is a good idea, is it at all > possible? Short answer: No. Traffic blocking works on IP addresses, not on DNS names. In practice you can get thousands of DNS names for the same IP, therefore blocking the IP of xyz.biz will also block abc.de. And while there might be a reverse DNS entry for an IP it will usually not give you all the names pointing to it, just one. You might get away with setting up a DNS proxy (again, enforced, disallow other DNS traffic via packet filter) and filtering there. Depending on your requirements this could be secure enough, but it does not prevent anyone from using IP an address directly or writing a custom hosts file to circumvent DNS filtering. HTH, Jamma. -- "What we nourish flourishes." - "Was wir nähren erblüht." www.tisc.de
[toc] | [prev] | [standalone]
Back to top | Article view | comp.os.linux.networking
csiph-web