search for: 09http

A recent request to provide a way to block access to certain websites (ba= nner=20 ads) led me to an idea. a) A new directory /etc/shorewall/lists b) In this directory, are files containing lists of IP addresses and/or=20 subnets c) a new JUMP rule: =09JUMP:list1=09loc=09net=09tcp=09http d) By default, matching in the list would be by destination address and i= f a=20 match was found, the connection request would be REJECTed e) The default behavior could be overridden through entries in a list: =09SOURCE:ACCEPT for example would match on the source address and would accept th...