The problem with this method, is that if there are many virtual host
websites running on the same IP, then you block all those websites,
not just the www.address.com website. My suggestion to the OP would be
to read squid docs, and see how you can specify a list of websites to
block (I'm almost positive it can be done) . If that is not an option,
try using the proxy module in apache, because I KNOW it has an option
to block specific websites, however as far as I can tell, cannot block
all websites except a white-list. If someone does know how to do this
using apache proxy module, please tell me (and the OP if that's what
he does need), as I've read through the apache docs for 1.3 over and
over, and couldn't find it, and this is a functionality that would
come in really, really handy (but don't need right away).

Jason

On 6/27/05, evilknievel <evilthings@gmail.com> wrote:
> This shouldnt be any problem, is it a big list of sites you want to block ?
>
> PF can handle this, something like this maybe "block out on $ext_if
> proto tcp from any to www.adress.com"
>
> you could probably insert a subnet for "any", or list of IPs defined
> by a macro and instead of the www.adress.com you could have also have
> a list defined by a macro...
>
> On 6/23/05, zia_khan2k <zia_khan2k@yahoo.com> wrote:
> > Dear Friends,
> >
> > I am new in this Group and nEw for OpenBSD also. I am using OpenBSD 3.
> > 6 for Firewall (PF) abd also Proxy (Squid). I want to block some
> > specific websites, so that people can not access those sites.
> >
> > Can anybody help me how to do it.
> >
> > Thanks in Advance
> >
> > Zia