From: Loki Harfagr on
Mon, 11 Jan 2010 13:00:22 -0800, D. Stussy did cat :

> "Tom Tom" <tomtomlx13(a)gmail.com> wrote in message
> news:bcfd6817-b28e-4c7b-a499-afb4ba55724c(a)u7g2000yqm.googlegroups.com...
>>but I don’t know how to redirect blocked users to web page information.
>
> That's because one can't do that with iptables alone. The web server
> has to be able to determine what it will allow and not. MAC addresses
> typically aren't available, so you'll also need an external script run
> by the server.

though there could be a quite intricate way to do it based on
-j DNAT --to $VIRTDOMIP:$VIRTDOMPORT with masquerade and redir rules
and have a virtual domain that'd only play the blockade info pages.
But, I'd really recommend to avoid this stuff and do it in the
application layer :-)