If an ipfilter rule specifies a hostname, rather than an IP address,
when does name resolution occur? That is, is it during the loading of the
rules via ipf, a la...
% ipf -I -Fa -f ipf.rules
...or does name resolution actually occur during rule processing (when a
packet hits the firewall)? FWIW, we're running ipf v3.3.18 under OpenBSD
2.8. (It's old but it works. ;-)
Thanks,
Mike
--
Michael T. Davis | Systems Specialist: CBE,MSE
E-mail: [EMAIL PROTECTED] | Departmental Networking/Computing
-or- [EMAIL PROTECTED] | The Ohio State University
http://www.ecr6.ohio-state.edu/~davism/ | 197 Watts, (614) 292-6928
