Block a domain in shorewall or host.deny?

[Void Main]

Although I run a Shorewall firewall I normally do not block addresses in Shorewall. I do it in my iptables configuration on my web server (I do not run Shorewall and the web server on the same box). If I were to do it on Shorewall I would probably do it like this:

Code: Select all

DROP net:61.160.216.63 all

That is assuming you are running your Apache server on your firewall box.