Is it possible to show the content/ip of a host alias?

slu

Hi,

is it possible to look whats inside the host alias (IPs) on the terminal?

johnpoz

@slu simple way would be to just cat your /tmp/rules.debug, the user aliases will be listed out in there

example:

# User Aliases 
80_443_22 = "{   80  443  22  8080 }"
table <AccessPoints> {   192.168.2.2  192.168.2.3  192.168.2.4 } 
AccessPoints = "<AccessPoints>"
table <alexas> {   192.168.4.76  192.168.4.77  192.168.4.78  192.168.4.79  192.168.4.80 } 
alexas = "<alexas>"

SteveITS

@slu You can run:

pfctl -T show -t aliasname

slu

Thank you @johnpoz and @SteveITS for the super fast reply.

slu

Interesting, in my alias is a FQDN but the IP is not in the alias if I check it with
pfctl -T show -t myaliasname

Than I tried a DNS lookup in the web gui, works (A record).
Now I created a new test alias with only this single FQDN and pfctl -T show -t testaliasname show not one entry.

Do someone saw such a behavior? No wonder my firewall rule don't work...

SteveITS

@slu like this?
https://forum.netgate.com/topic/196927/filterdns-has-stopped-resolving-hostnames-in-firewall-aliases

slu

@SteveITS yes it look like, but I have actual filterdns log entries im my log.