Devdas Bhagat wrote:
On 20/07/06 09:06 +0530, Kenneth Gonsalves wrote:
On 20-Jul-06, at 12:50 AM, Harsh Busa wrote:
saw on some TV channel that govt is refining the order to only certain blogs of blogspot and parts of other sites.
which cant be done
It *can*. It isn't impossible. Just economically infeasible.
Devdas Bhagat
Three ways to do this and not at all expensive: 1) Make your DNS server host blogspot.com and redirect ALL port 53 traffic to it and block blockedblog.blogspot.com requests. 2) Use transparent proxy which also does SNAT, back to original IP for outgoing packets. 3) Just like ip_conntrack_ftp module which tracks PORT commands, develope ip_conntrack_http module which tracks HTTP "Host:" header and blocks the blocked sites.
3rd option seems to be much more easy (and technically sound as it would require no redirection/NAT) once code is developed and can also be implemented on router chip.
Amish.