Of course if you can write the filter, it must be simple enough to script changes to iptables based on recent packet statistics directly.<p>But often times you don&#x27;t even know what domain is being connected to at the network layer. You need output from the process holding the connection key. And you want very clear separation from that task...