Apache Virtual Host & TCP Rejecting

Hi.
I would like to know if it would be possible to tcp reject (or drop)
requests that don't have a domain name, but only an IP adress.
I explain myself :
I run a webserver which is accessible through two domain names :
www.domain1.com & www.domain2.com.
Each domain is mapped to a name-based virtual host in apache.
I would like a user who types www.domain1.com in his browser to go to the
right virtual host and receive the corresponding http page, but I would like
a user who types the actual IP and who doesn't know the domain to be TCP
rejected (ie without even a http response).
That way, scans on port 80 would fail but a request with the actual domain
name would be successful.
Do you think it's possible with an apache module or something ?
My firewall is iptables.
Thanx
Yann

Yes, well sort of.

make all domain virtual hosts and the default goes to a dumb page or
something..

if your want real TCP resets that can only be done with firewalling I
guess.. use iptables and "-m string" string match patch o matic.. you match
the port 80 http request and reject the packet..

"Yann Zz" <pspfr DeleteThis @netcourrier.com> wrote in message
news:bgt42o$fnb$1@news-reader2.wanadoo.fr...
 > Hi.
 > I would like to know if it would be possible to tcp reject (or drop)
 > requests that don't have a domain name, but only an IP adress.
 > I explain myself :
 > I run a webserver which is accessible through two domain names :
<font color=purple> > <a style='text-decoration: underline;' href="http://www.domain1.com" target="_blank">www.domain1.com</a> & <a style='text-decoration: underline;' href="http://www.domain2.com.</font" target="_blank">www.domain2.com.</font</a>>
 > Each domain is mapped to a name-based virtual host in apache.
 > I would like a user who types <a style='text-decoration: underline;' href="http://www.domain1.com" target="_blank">www.domain1.com</a> in his browser to go to the
 > right virtual host and receive the corresponding http page, but I would
like
 > a user who types the actual IP and who doesn't know the domain to be TCP
 > rejected (ie without even a http response).
 > That way, scans on port 80 would fail but a request with the actual domain
 > name would be successful.
 > Do you think it's possible with an apache module or something ?
 > My firewall is iptables.
 > Thanx
 > Yann
 >
 ><!-- ~MESSAGE_AFTER~ -->