As far as I always understood from the docs (but I may be wrong) any domain listed in a dstdomain list will also cover the IP associated with the domain IF the IP has that domain related to it when you do a reverse lookup on the IP. So for most big websites/domains that will usually work but small sites that are hosted at home generally resolve back to the ISP and not to the domain they are hosting... The dst type list also does the reverse lookup if I recall correctly... Hope that wasn't wrong and helpful, Eli 2012/2/28 alexus <alexus@xxxxxxxxx>: > Hi > > What's the best way to 403 any site that people go via IP address > instead of hostname? > > if someone goes to http://64.237.55.82/ vs http://alexus.org/ > > so if someone types in http://alexus.org/ it should work yet if > someone types in http://64.237.55.82 it should not > > -- > http://alexus.org/