I do not beleive this is possible with the firewall now. The address put into a firewall rule has to "IP address resolveable" for the system to block it. In other words, if you put "www.xxyyzz.com" in to be blocked, NIS would always resolve the current IP address for that site and then block that. If you know the IP address ranges for that domain, you can put that in but not *.cn . Hope this helps.
<<Edit: Removed hyperlink to an unknown Website.>>
Why would you want to block an entire domain suffix, namely, China?
If there are some sites within the .cn domain, that's a different story.
Is that what you mean?
Let us know...
P.S. I should have been wearing my eyeglasses - thanks, Marty!
Message Edited by Compumind on 04-06-2009 09:54 AM
The suggestion to block the entire .cn domain was posted on another forum. The more I thought about it the more I felt that with all the problems emanating from China regarding to black-hat hacking, piracy, drive-by downloads or whatever, the idea was interesting and certainly wouldn't encroach on my ability to function more than adequately on the Internet.