On 17 November 2014 13:57, DJ Delorie <dj(a)redhat.com> wrote:
> Ugh .. sorry but that's the worst suggestion so far. No image the user
> goes to
http://addons.mozilla.org/ to install addons ... it won't
> work. (just one random example but you get the idea).
I imagine the user would change the start page to about:blank, then
open the firewall, then everything works as normal.
Of course, this only works for single-user machines. A multi-user
machine wouldn't protect the second user to run Firefox.
In the days of CDN's and other tricks to deal with no more IPv4 ips you
can't block *.mozilla.org without also blocking everything from CNN to your
local bank. The ips may change all the time or they may be leased to
someplace for a short time.
--
Stephen J Smoogen.