On 8/2/06, Bob Young <bob at lavamail dot net> wrote:
>
> I pinged the website name, so it would come back with the IP address of the
> website.  So I used that IP address to reject.
>

Most bigger sites use round robin DNS, so pinging isn't sufficient
with many sites.

like:
C:\>nslookup
Default Server:  ...
Address:  ...

> google.com
Server:  ...
Address:  ...

Name:    google.com
Addresses:  64.233.167.99, 72.14.207.99, 64.233.187.99



With that said, you also probably don't want to be blocking entire
networks, just single IP's.  Use single host rather than network in
the drop down on the destination on the firewall page.

-Chris