make a table, and have cron update the contents of this table with the
result of the latest resolved ip.

2013/3/15 Gilles LAMIRAL <[email protected]>

> Hello,
>
> I need to use an hostname in a pf rule to allow a connection.
> The hostname is needed because the resolution is dynamic,
> it can change at any minute (TTL 60).
>
> Is there a flag to tell pf to resolve the name each time it tries to match
> this part?
> The domain name server is trusted and near/fast the pf host,
> The rules are written so that this rule is not read often.
> There's no no problem if pf slows down because of name resolution times.
> I've seen I can do it with an anchor and a script flushing/adding the
> hostname each minute or less,
> I ask if there's a way less complicated and more understandable (reading
> pf.conf).
>
> Thanks in advance.
>
> --
> Au revoir,                             09 51 84 42 42
> Gilles Lamiral. France, Baulon (35580) 06 20 79 76 06
>
>


-- 
May the most significant bit of your life be positive.

Reply via email to