IPChains hostname has multiple IPs is resolves to?

Ionized · 07-29-2002, 11:20 PM

I want to block the hostname ads.web.aol.com (don't we all). I've attempted to put in a clause in my firewall script as such:

ipchains -A input -b -i eth0 -p tcp -s ads.web.aol.com -d $MYIP -j REJECT

but it doesn't seam to work.
I'm wondering...is ipchains unable to work with hostnames that resolve to multiple IP addresses?

MartBrooks · 07-30-2002, 01:03 AM

ipchains will block whichever IP ads.web.aol.com resolves to when the rule is inserted. It won't re-evaluate the IP until the rule is flushed and reloaded.

You'll need to block all the IPs associated with the A record. Better still you could use squid and squidguard to block banners.

Regards