Proxy or carrier-grade NAT?
Presumably this 'filter' requires the ISP to be able to trace back through their proxy or CGN device to associate an outgoing connection with the subscriber making the request. No citizen database required, just proxy server and NAT logs.
Biting the hand that feeds IT
