Re: Blocking certain terrorism/porn sites and DNS

Why not just bring back the "evil bit" as a serious proposal?

I've recently discovered a useful application for the evil bit: sandboxes for mobile code (think Java applets) can use it to instruct firewalls not to open additional ports just because a client sends a "PORT" command on a port 21/TCP connection. 8-)