iptables block host name instead of ip address

How do i block traffic to a specifick hostname.
For example www.hotmail.com

host www.hotmail.com
www.hotmail.com is an alias for www.hotmail.com.nsatc.net.
www.hotmail.com.nsatc.net has address 166.63.208.155
www.hotmail.com.nsatc.net has address 207.68.172.241
www.hotmail.com.nsatc.net has address 208.173.208.152

Now i insert all the seperate ip addresses so trafic to
www.hotmail.com is blocked.

However, when the ip address change, people can go to www.hotmail.com
again, without notice.

Can this be done with iptables or perhaps some other way?

Kind Regards


-

"-" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om...
> How do i block traffic to a specifick hostname.
> For example www.hotmail.com
>
> host www.hotmail.com
> www.hotmail.com is an alias for www.hotmail.com.nsatc.net.
> www.hotmail.com.nsatc.net has address 166.63.208.155
> www.hotmail.com.nsatc.net has address 207.68.172.241
> www.hotmail.com.nsatc.net has address 208.173.208.152
>
> Now i insert all the seperate ip addresses so trafic to
> www.hotmail.com is blocked.
>
> However, when the ip address change, people can go to www.hotmail.com
> again, without notice.
>
> Can this be done with iptables or perhaps some other way?

Fundamentally this cannot be done. In principle, an IP filter has no way
of knowing what host name another computer used to establish what IP address
it's connecting to.

It's like trying to program a telephone system to prevent calls to
George Jones, even if his phone number changes or he is at a friend's house.
The phone system has no idea who you are calling, just what number you
dialed.

DS

On 2005-02-04, - <(E-Mail Removed)> wrote:
> How do i block traffic to a specifick hostname.
> For example www.hotmail.com

In your DNS define www.hotmail.com to point to 127.0.0.1 or just program
your proxy to forbid that domain.
This will not block the connections but make them to fail.

Davide

--
The hardware is the part of the computer that you an kick.