Feature Requests

A blacklist would be a nice feature to have, to prevent users (or malicious programs) to contact blacklisted sites.

You can "blacklist" a website/host using the DNS forwarder.

Enter the hostname and point it to an invalid address (or you could point it to a webserver showing a page that says it's blacklisted).

Of course, that does not prevent direct IP connections to that host. If needed, you could break it by using an invalid route for that IP.

or you could create a Rule to reject (not block, as this will make the client wait for a time-out) traffic from the LAN to said IP.

An excellent feature would be to add support for DShield submissions and blacklist retrieval.

http://www.dshield.org/howto.html

This is a very useful Internet security tool.