Hello, I recommend the use of a http proxy server which allows access control ( for example SQUID ). Only by using iptables - you would need to deny access to whole yahoo IP range. When you use -d www.yahoo.com iptables resolves the www.yahoo.com into one IP address which will be blocked then. But since Yahoo has more IP addresses ( served in round-robin manner by DNS servers ) that wont help you much. Regards, Edvin Seferovic -----Original Message----- From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Elvir Kuric Sent: Sonntag, 03. September 2006 14:26 To: saki; netfilter@xxxxxxxxxxxxxxxxxxx Subject: Re: How do I block www.yahoo.com Hi, try this iptables -A FORWARD -p tcp -s 10.0.1.3 -d www.yahoo.com -j DROP Regards Elvir --- saki <sakimumustafa@xxxxxxxxx> wrote: > Hello Guruz, > I want to block traffic from host 10.0.1.3 to > www.yahoo.com through my Gateway server. > > I implimented this command : > #iptables -A FORWARD -o eth0 -s 10.0.1.3 -d > www.yahoo.com -j DROP > But could not block traffic. Any idea? > > Best Regards, > Saki > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam > protection around > http://mail.yahoo.com > > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com