iptables Blocking Requested Domain for Bind

Hi there,

Got a bit of a question here, got the following working that blocks any domain with the given string:

iptables -I INPUT -m string --string thedomain.to.block.om --algo bm -j REJECT

Works amazing but then for say expandability purposes is there any chance of being able to maybe say get it to go to some kind of list, if say because I'm getting a load of requests for a domain thats not hosted on my server if they used any other domain could I do both say?

Hope this makes sense

Using CentOS 7

The problem with your rule is that it doesn't block the domain, it blocks any packet that contains that string. You should configure bind so it only accepts queries from the internet for your own domains, and only forwards requests from your local clients.