Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 11:35, Jim Pingle wrote: On 3/15/2012 10:19 AM, Ugo Bellavance wrote: As you can see, repos.zend.com.cdngc.net has many, many addresses (and the TTL is 20 s!. I doubt it will work if I just put repos.zend.com in my alias. Correct, it won't help you there, it's not likely anythin

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
> Well, but who do other guys handle those problems (the ones Ugo said and > mine)? Wouldn't it be at least a half-backed measure to create a > ip-collection-daemon ... I'm not aware of anyone doing that in firewall rules in a meaningful way. It can be possible if things are run through a proxy

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Raimund Sacherer
> On 3/15/2012 10:19 AM, Ugo Bellavance wrote: > > As you can see, repos.zend.com.cdngc.net has many, many addresses > > (and > > the TTL is 20 s!. I doubt it will work if I just put > > repos.zend.com in > > my alias. > > Correct, it won't help you there, it's not likely anything really > will.

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
On 3/15/2012 10:19 AM, Ugo Bellavance wrote: > As you can see, repos.zend.com.cdngc.net has many, many addresses (and > the TTL is 20 s!. I doubt it will work if I just put repos.zend.com in > my alias. Correct, it won't help you there, it's not likely anything really will. Not in firewall rules

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 09:47, Raimund Sacherer wrote: Does this filterdns daemon *change* the addresses or adds them? What I mean is, if you get multiple IP's from DNS RoundRobin style, you always have the same batch of IP's, but if they are loadbalanced in a different way and you retrieve different ba

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Raimund Sacherer
> > Does this filterdns daemon *change* the addresses or adds them? > > What I mean is, if you get multiple IP's from DNS RoundRobin > > style, you always have the same batch of IP's, but if they are > > loadbalanced in a different way and you retrieve different batchs > > of IP's or a different

Re: [pfSense] Programatically add IP to Alias

2012-03-15 Thread Yehuda Katz
On Thu, Mar 15, 2012 at 5:00 AM, Chris Buechler wrote: > On Thu, Mar 15, 2012 at 5:01 AM, Raimund Sacherer > wrote: > > I would wish that pfSense integrates a simple REST API for functionality > like that: > > Me too. Patches welcome. I would be interested in working on this (it is a feature I

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 09:01, Jim Pingle wrote: On 3/15/2012 8:56 AM, Seth Mos wrote: So I've been creating all my servers in aliases for nothing I guess? I'd just have to create the groups I want, then add the servers' DNS name I want inther and voila? Not a good idea, unless all the records match up

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
On 3/15/2012 8:56 AM, Seth Mos wrote: >> So I've been creating all my servers in aliases for nothing I guess? I'd >> just have to create the groups I want, then add the servers' DNS name I >> want inther and voila? > Not a good idea, unless all the records match up. If the system has > different a

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
On 3/15/2012 8:36 AM, Stefan Baur wrote: > Am 14.03.2012 21:23, schrieb Jim Pingle: >> On 3/14/2012 4:08 PM, Ugo Bellavance wrote: >>> Is there DNS resolution in aliases (pfSense 2.x)? Is it possible to >>> create an alias, for example, named "bunch of servers", and in the >>> hosts, instead of en

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Seth Mos
On 15-3-2012 13:50, Ugo Bellavance wrote: > On 2012-03-15 08:35, Jim Pingle wrote: >>> Is it possible to evoke the daemon from the shell to fast prefill an >>> alias list? >> >> Not sure why you'd want to do that, just add hostnames to an alias and >> be done with it. > > So I've been creating all

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 08:35, Jim Pingle wrote: Is it possible to evoke the daemon from the shell to fast prefill an alias list? Not sure why you'd want to do that, just add hostnames to an alias and be done with it. So I've been creating all my servers in aliases for nothing I guess? I'd just have t

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 08:35, Jim Pingle wrote: And I could probably offer help for the book this summer as I'll be in parental leave for 5 weeks. I think you'll be a bit busier at that time then you might expect. :-) It'd be our second, and to keep our privilege to have our children at the daycare,

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Stefan Baur
Am 14.03.2012 21:23, schrieb Jim Pingle: On 3/14/2012 4:08 PM, Ugo Bellavance wrote: Is there DNS resolution in aliases (pfSense 2.x)? Is it possible to create an alias, for example, named "bunch of servers", and in the hosts, instead of entering the IP address, enter a DNS name? Yes. Uh, ar

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
> And I could probably offer help for the book this summer as > I'll be in parental leave for 5 weeks. I think you'll be a bit busier at that time then you might expect. :-) ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
On 3/15/2012 4:27 AM, Raimund Sacherer wrote: > A=B=C= I Did not know about these possibilites, and I have the pfsense book > too, I think this is REALLY important information, especially the that > multiple IP's are gathered from DNS and that they are rechecked every X > minutes! This should de

Re: [pfSense] Programatically add IP to Alias

2012-03-15 Thread Jim Pingle
On 3/15/2012 5:01 AM, Raimund Sacherer wrote: > I would wish that pfSense integrates a simple REST API for functionality like > that: > > * Add/Remove IP to/from alias > * Add/Remove Rule X (e.g., we do at times integration work, would be nice to > have GUI in our back-office application that re

Re: [pfSense] Crashed pfsense

2012-03-15 Thread Ugo Bellavance
On 2012-03-14 11:18, Ugo Bellavance wrote: Hi, While configuring a pfsense (in a VMWare VM), it crashed a few seconds after saving the configuration for an interface. I can see it displayed "savecore: reboot" and "savecore: writing core to textdump.tar.0". Would it be usefull to try to diagnose

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 04:27, Raimund Sacherer wrote: On 3/14/2012 4:08 PM, Ugo Bellavance wrote: Is there DNS resolution in aliases (pfSense 2.x)? Is it possible to create an alias, for example, named "bunch of servers", and in the hosts, instead of entering the IP address, enter a DNS name? Yes.

Re: [pfSense] Programatically add IP to Alias

2012-03-15 Thread Chris Buechler
On Thu, Mar 15, 2012 at 5:01 AM, Raimund Sacherer wrote: > I would wish that pfSense integrates a simple REST API for functionality like > that: > Me too. Patches welcome. ___ List mailing list List@lists.pfsense.org http://lists.pfsense.org/mailman/li

Re: [pfSense] Programatically add IP to Alias

2012-03-15 Thread Raimund Sacherer
I would wish that pfSense integrates a simple REST API for functionality like that: * Add/Remove IP to/from alias * Add/Remove Rule X (e.g., we do at times integration work, would be nice to have GUI in our back-office application that requests a port open to an internal dev pc, and on submit,

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Raimund Sacherer
> On 3/14/2012 4:08 PM, Ugo Bellavance wrote: > > Is there DNS resolution in aliases (pfSense 2.x)? Is it possible > > to > > create an alias, for example, named "bunch of servers", and in the > > hosts, instead of entering the IP address, enter a DNS name? > > Yes. A > > > To push it even fur

Re: [pfSense] Programatically add IP to Alias

2012-03-15 Thread Claus@pfSense
Thanks for the answer! Is there a developers overview somewhere so I have an idea where to search ? I looked a little into the alias php's, but I need to know about the underlying datamodel and the processes that updates the real firewall. Thanks Claus -Original Message- From: list-bou