<p><span class="h-card" translate="no"><a href="https://mastodon.social/@mcc" class="u-url mention">@<span>mcc</span></a></span> You'd need to basically do a full upper layer proxy, I think. Definitely not passive. But it's doable.</p><p>Basically a hub that does deep packet inspection and firewalling.</p>