Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Raimund Sacherer
On 3/14/2012 4:08 PM, Ugo Bellavance wrote: Is there DNS resolution in aliases (pfSense 2.x)? Is it possible to create an alias, for example, named bunch of servers, and in the hosts, instead of entering the IP address, enter a DNS name? Yes. A To push it even further, if it is

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 04:27, Raimund Sacherer wrote: On 3/14/2012 4:08 PM, Ugo Bellavance wrote: Is there DNS resolution in aliases (pfSense 2.x)? Is it possible to create an alias, for example, named bunch of servers, and in the hosts, instead of entering the IP address, enter a DNS name? Yes. A

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
On 3/15/2012 4:27 AM, Raimund Sacherer wrote: A=B=C= I Did not know about these possibilites, and I have the pfsense book too, I think this is REALLY important information, especially the that multiple IP's are gathered from DNS and that they are rechecked every X minutes! This should

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
And I could probably offer help for the book this summer as I'll be in parental leave for 5 weeks. I think you'll be a bit busier at that time then you might expect. :-) ___ List mailing list List@lists.pfsense.org

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 08:35, Jim Pingle wrote: And I could probably offer help for the book this summer as I'll be in parental leave for 5 weeks. I think you'll be a bit busier at that time then you might expect. :-) It'd be our second, and to keep our privilege to have our children at the daycare,

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 08:35, Jim Pingle wrote: Is it possible to evoke the daemon from the shell to fast prefill an alias list? Not sure why you'd want to do that, just add hostnames to an alias and be done with it. So I've been creating all my servers in aliases for nothing I guess? I'd just have

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
On 3/15/2012 8:56 AM, Seth Mos wrote: So I've been creating all my servers in aliases for nothing I guess? I'd just have to create the groups I want, then add the servers' DNS name I want inther and voila? Not a good idea, unless all the records match up. If the system has different

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Ugo Bellavance
On 2012-03-15 09:01, Jim Pingle wrote: On 3/15/2012 8:56 AM, Seth Mos wrote: So I've been creating all my servers in aliases for nothing I guess? I'd just have to create the groups I want, then add the servers' DNS name I want inther and voila? Not a good idea, unless all the records match

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Raimund Sacherer
Does this filterdns daemon *change* the addresses or adds them? What I mean is, if you get multiple IP's from DNS RoundRobin style, you always have the same batch of IP's, but if they are loadbalanced in a different way and you retrieve different batchs of IP's or a different IP at the

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
On 3/15/2012 10:19 AM, Ugo Bellavance wrote: As you can see, repos.zend.com.cdngc.net has many, many addresses (and the TTL is 20 s!. I doubt it will work if I just put repos.zend.com in my alias. Correct, it won't help you there, it's not likely anything really will. Not in firewall rules

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Raimund Sacherer
On 3/15/2012 10:19 AM, Ugo Bellavance wrote: As you can see, repos.zend.com.cdngc.net has many, many addresses (and the TTL is 20 s!. I doubt it will work if I just put repos.zend.com in my alias. Correct, it won't help you there, it's not likely anything really will. Not in

Re: [pfSense] DNS resolution in aliases

2012-03-15 Thread Jim Pingle
Well, but who do other guys handle those problems (the ones Ugo said and mine)? Wouldn't it be at least a half-backed measure to create a ip-collection-daemon ... I'm not aware of anyone doing that in firewall rules in a meaningful way. It can be possible if things are run through a proxy,

Re: [pfSense] DNS resolution in aliases

2012-03-14 Thread Jim Pingle
On 3/14/2012 4:08 PM, Ugo Bellavance wrote: Is there DNS resolution in aliases (pfSense 2.x)? Is it possible to create an alias, for example, named bunch of servers, and in the hosts, instead of entering the IP address, enter a DNS name? Yes. To push it even further, if it is the case, can

Re: [pfSense] DNS resolution in aliases

2012-03-14 Thread Ugo Bellavance
On 2012-03-14 16:23, Jim Pingle wrote: On 3/14/2012 4:08 PM, Ugo Bellavance wrote: Is there DNS resolution in aliases (pfSense 2.x)? Is it possible to create an alias, for example, named bunch of servers, and in the hosts, instead of entering the IP address, enter a DNS name? Yes. That