On Fri, Jul 11, 2014 at 12:19:11PM -0700, ARUN CHAKRAPANI RAO wrote: > Hi, > Please do forgive me if this is the wrong place to as this Q? > We are an isp looking for a tool which can block specific url instead of > the domain itself. > for example > [1]http://www.facebook.com/seekinghelp > https://twitter.com/canweblockurl > The reason being, we get mails from the Government ordering us to block > specific url's. > We are about to evaluate Shorewall, wanted to know from any one of you as > to whether this is possible. > If this is not the tool, anybody can guide as to which open source is > stable enought to do this job along with the firewall ?
The short answer: No. The longer answer: Shorewall is only a front-end for iptables. The only thing that iptables cares about is packets. To block a specific URL, you will need something that works at the application layer. I would look at Squid and see if that does what you need. Regards, -Roberto -- Roberto C. Sánchez http://people.connexer.com/~roberto http://www.connexer.com
signature.asc
Description: Digital signature
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
