Guys,
What happens if you write a rule with a domain name
instead of an IP address ?
Technically...
???
( Please do a reply-all )
-AEF
---------- Forwarded Message ----------
Subject: iptables rule by domain name?
Date: Mon, 4 Mar 2002 14:51:31 -0600
From: [EMAIL PROTECTED]
To: Allen <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Allen,
I have been told I'm going to have to ip blocking by
domain name. I have a question which I haven't been
able to find the answer to.
If a rule is added like -s rlink.goofus.user -j DENY
would netfilter do the DNS lookup at the time the
rule was added or would it do it a reverse DNS every time
a packet hit (surely not ) ?
This is a major performance question?
And if its the former (I hope) what if the firewall didn't have DNS open
at the time the rule was added.
Thought you might have an idea. Thanx
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
The Central Texas Linux User's Group meets at 7 PM on the third
Monday of every month at the facilities of Cisco Systems in Austin.
See our website at <http://www.ctlug.org> for details.
-------------------------------------------------------
--
I don't use a keyboard anymore, my cat does all my typing for me...
