I'm looking to drop a connection if a website contains a certain word or phrase. The issue is, the site is typically compressed with gzip. Any ideas?
Blocking gzip HTTP content with Iptables or Snort?
iptables;gzip;snort