Is it possible to use ipfw to filter packets by domain name? What I need it for: I'd like to allow ssh logins only from a specific TLD (by reverse lookup...) - maybe there's another way?