On 17 November 2014 13:57, DJ Delorie <dj@redhat.com> wrote:

> Ugh .. sorry but that's the worst suggestion so far. No image the user
> goes to http://addons.mozilla.org/ to install addons ... it won't
> work. (just one random example but you get the idea).

I imagine the user would change the start page to about:blank, then
open the firewall, then everything works as normal.

Of course, this only works for single-user machines.  A multi-user
machine wouldn't protect the second user to run Firefox.

In the days of CDN's and other tricks to deal with no more IPv4 ips you can't block *.mozilla.org without also blocking everything from CNN to your local bank. The ips may change all the time or they may be leased to someplace for a short time.

Stephen J Smoogen.