Hello Tim,
this has not been included in pfdns, but can you try to modify pfdns ?

Modify the line
if ($qtype eq "A") {
by
if ($qtype eq "A"|| $qtype eq "SRV") {

next unless $rr->type eq "A";
by
next unless ($rr->type eq "A"||$rr->type eq "SRV");

And of course add each port you want to use with:

my $cmd = "LANG=C sudo ipset --add pfsession_passthrough $ip,$PORT_I_WANT_TO_USE 2>&1";
my @lines = pf_run($cmd, , accepted_exit_status => [ $_EXIT_CODE_EXISTS ]);

Let me know if it´s working.

Regards
Fabrice


Le 2013-07-15 07:49, Tim DeNike a écrit :
Doesnt seem to do SRV record lookup if you want to allow AD login in registration/isolation.


------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk


_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users


--
Fabrice Durand
[email protected] ::  +1.514.447.4918 (x135) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence 
(http://packetfence.org)

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to