On Jan 4, 2013 8:33 PM, "Walter Dnes" <waltdnes@waltdnes.org> wrote:
>
> On Fri, Jan 04, 2013 at 03:27:59PM -0500, Michael Mol wrote
> > On Fri, Jan 4, 2013 at 3:17 PM, Walter Dnes <waltdnes@waltdnes.org>
wrote:
> > >
> > >   The mere fact that you haven't manually typed in...
> > > http://www.facebook.com/blah_blah_blah does not mean you're not
> > > connecting to it.
> >
> > But all that's above layer 3, since it's an HTTP redirect, or a page
> > transclusion which necessitates a new GET request. Michael's point
> > stands.
>
>   And I want to make sure that new GET request is blocked coming and
> going.
>
> --
> Walter Dnes <waltdnes@waltdnes.org>
> I don't run "desktop environments"; I run useful applications
>

And it will, for the simple reason that outbound psckets are dropped, so
inbound packets are nevrr valid. That was Michael's point.