Hey all! So?here's what I have: LOG udp -- * * 10.0.0.1 0.0.0.0/0 STRING match "myspace" ALGO name bm TO 65535 LOG flags 0 level 4 prefix `Myspace ' DROP udp -- * * 10.0.0.1 0.0.0.0/0 STRING match "myspace" ALGO name bm TO 65535 LOG udp -- * * 10.0.0.1 0.0.0.0/0 STRING match ".cc" ALGO name bm TO 65535 LOG flags 0 level 4 prefix `cc ' DROP udp -- * * 10.0.0.1 0.0.0.0/0 STRING match ".cc" ALGO name bm TO 65535 Been trying to nuke DNS resolution for a couple domains. The myspace match works like a champ?can't resolve when I dig myspace.com. The cc one doesn't seem to work, and I suspect it's because of the . in the string. I can't just match "cc", or else any domain name with a cc in it would fail, so I'm attempting to match ".cc". I tried different methods (--hex-string "|2e|cc") but nothing seems to match. Does anyone have any hints on how to get this to work? Thanks all! James -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html