Hi ! I recreated these alias tables with a shorter name (they were called dacotaHOSTS and now are called dacota) and now it works... Perhaps there might be some problem ? The problem however seems solved for now...
regards, Martin > From: [email protected] > To: [email protected] > Date: Wed, 18 May 2016 15:13:13 +0000 > Subject: Re: [pfSense] firewall rules with fqdn-alias > > Is there a length limit for alias names? > > If it's an invalid alias I would think one of the logs should show something > when the firewall rules are applied...I recall seeing errors in there > before... > > -- > > Steve Yates > ITS, Inc. > -----Original Message----- > From: List [mailto:[email protected]] On Behalf Of Martin Fuchs > Sent: Wednesday, May 18, 2016 4:22 AM > To: 'pfSense Support and Discussion Mailing List' <[email protected]> > Subject: Re: [pfSense] firewall rules with fqdn-alias > > Hi ! > > Sounds reasonable, but there's no dot at the end ... > > Regards, > martin > > -----Ursprüngliche Nachricht----- > Von: List [mailto:[email protected]] Im Auftrag von > WolfSec-Support > Gesendet: Mittwoch, 18. Mai 2016 09:26 > An: pfSense Support and Discussion Mailing List <[email protected]> > Betreff: Re: [pfSense] firewall rules with fqdn-alias > > Hi Martin > > Do you have a dot at the end of the fqdn like in bind configs ? > > Pfsense doesnt like a dot at the end. > With e.g. > host.domain.tld > It works fine > > With > host.domain.tld. > It works not > > So if you use a dot at the end please remove it > > Br > Stephan > Am 18.05.2016 00:12 schrieb "Martin Fuchs" <[email protected]>: > > > Hi, Steve ! > > No dots in the alias, yurt in the fqdn-address, the lookup works fine, > > so the resolved fqdn are visible in the tables, but it seems as if the > > rule is not applied. > > But there is no error... > > Any diagnostic hints ? > > Regards, > > Martin > > > > > Are you using dots in your FQDNs? Those aren't valid alias names... > > > 'The > > name of the alias may only > > > consist of the characters "a-z, A-Z, 0-9 and _".' > > > > > > -- > > > > > > Steve Yates > > > ITS, Inc. > > > > > > -----Original Message----- > > > From: List [mailto:[email protected]] On Behalf Of > > > Martin > > Fuchs > > > Sent: Tuesday, May 17, 2016 9:26 AM > > > To: [email protected] > > > Subject: [pfSense] firewall rules with fqdn-alias > > > > > > Hi ! > > > > > > We're using pfSense 2.3_1 here in a CARP-cluster. > > > > > > We are using rules with fqdn-aliases and those rules do not work. > > > > > > When i look under diagnostics -> tables i see the tables filled with > > > the > > correct IPs. > > > > > > When I change the rule not to use the alias, but the IP instead, the > > rules works immediately. > > > > > > It's really weired. > > > > > > Does anyone have some idea for me ? > > > > > > Regards, > > > > > > martin ! > > > > > > _______________________________________________ > > > pfSense mailing list > > > https://lists.pfsense.org/mailman/listinfo/list > > > Support the project with Gold! https://pfsense.org/gold > > > _______________________________________________ > > > pfSense mailing list > > > https://lists.pfsense.org/mailman/listinfo/list > > > Support the project with Gold! https://pfsense.org/gold > > > > _______________________________________________ > > pfSense mailing list > > https://lists.pfsense.org/mailman/listinfo/list > > Support the project with Gold! https://pfsense.org/gold > > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
