https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=74610

Eugene Grosbein <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|[email protected]    |[email protected]
                 CC|                            |[email protected]
             Status|In Progress                 |Closed
         Resolution|---                         |Works As Intended

--- Comment #4 from Eugene Grosbein <[email protected]> ---
DNS service is started way later that firewall configuration happens, so it is
error of administrator to rely on it in the ipfw ruleset processed at boot
time.

There are several ways to make it right, though:

- for simple cases, just add an IP address to /etc/hosts;
- for more correct behaviour, use ipfw table instead of direct FQDN usage:

ipfw table 1 create type addr
ipfw add allow ip from 'table(1)' to any

Then create rcNG startup script requiring "named" service (or local_unbound
etc.) that would populate table with all addresses of needed FQDN later when
DNS resolution service is running.

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"

Reply via email to