snort - content filter

[systemx]

how can i block url address with snort and redirect the packet to a local page?
( foo.com/last/december/index.php?4455&6F - redirect to localhost:5000 )

i want to study for a  %100 transparent content filter
i have 500.000 domains, 300 url+path
i find the IP addreses of domains and import them to iptables
it works fine.
but what can i do with urls?
i cannot use a system like squid+squidguard.

is there another simple and fast way for this?

thanks.